® Cisco’s wireless LAN gear has a tough time handling VoIP calls, users say. 
® Some users-yawn at the prospect of Microsoft releasing an update to Windows Server 2003. 
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end. But company offi- 
cials decided to add a 
third beta-test release, 
which will delay ship- 
ments by as much as 
six months. The deci- 


BY MARC L. SONGINI 
AND CAROL SLIWA 


Microsoft Corp. last 
week pushed back the 
release date of its Yu- 
kon upgrade to SQL 


Server for the third time, forc- 


ing some users of the database 


to modify deployment plans 
and leaving others unhappy 
about the extended wait for 
needed functionality. 
Microsoft’s latest plan had 
been to ship Yukon by year’s 


sion to wait until the first half 
of 2005 also affects the next 
version of Microsoft’s Visual 
Studio .Net development 
tools, code-named Whidbey. 
“T’m stunned,” said Keith 
Gilbert, an enterprise data ar- 
SQL Server, page 53 


worded pri- 
vacy laws makes it tough 
for IT to do the right thing, 
and outsourcing makes it 


hard to control what hap- 
pens to personal data. 
Stories begin on Page 35. 


Diversity in IT Supply Chain Pays Off, Cl0s Say 


serve customers with a wide 
| range of backgrounds, added 
| the CIOs, who were attending 
| aconference organized by 
The Alliance of Business 
Leaders and Entrepreneurs 
and Crain’s Chicago Business. 
Supporting diversity in the 
| supply chain yields “smaller, 
more agile and flexible com- 
panies focused on providing 
premium customer satisfac- 
tion,” said James Burdiss, CIO 
at $7.7 billion Smurfit-Stone 
Container Corp. in Alton, Ill. 
Diversity, page 16 


Mit a Lehman niicesies 


ALS)? eee Cire ei Bee ena) 
CIS EVEL a Ela ic mec lime 01 Cer |e 


= BEST IN CLASS: Our special Premier 100 supple- 
ment appears between d 


Se) Maman RAC mel ttn 
executives experienced on-site. €9 0 


‘Tapping suppliers that are owned by women or 


Datta minorities can expand skill set, customer base 





BY JAIKUMAR VIJAYAN 
CHICAGO 


IT LEADERS : SNL ORO LM Det Ny 


panies owned by women or 
minorities in the IT supply 
chain can give buyers better 
RBXBBIF TRARKAEHARRARAAUTORRS-DIGIT 48106 access to specialized skills and 
#023494S/CB/7# CW2804118 302 6366 more opportunities for cost 
3s reduction, said CIOs from sev- 
eral large organizations at a 
conference here last week. 
Having a diverse supplier 
base can also help attract and 
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Finally, the technology of a supercomputer at a breakthrough price. It’s here in our newest IBM eServer BladeCenter 
server* The BladeCenter JS20 is powered by the same chip technology that drives some of the world’s fastest 
supercomputers — the innovative POWER™ architecture — yet it’s designed to be affordable. Very affordable. Plus, 
BladeCenter JS20 servers thrive in both 32- and 64-bit environments. And when slipped into a complete BladeCenter 
system, voila, a single interface integrates your servers, network and storage. So do what the on demand world 
demands: simplify — and advance — your infrastructure. For more information, visit ibm.com/eserver/blade 


The BladeCenter JS20' is powered by advanced POWER 


= er V er processor technology. (Slide it into the BladeCenter system 
; J and you've got the power to advance your business.) 





The right management should do more than just protect. 
It should also enable. 


eTrust™ 


With eTrust security management software, your information isn't just safeguarded from internal and external threats. 


We provide authorized customers, partners, and employees with appropriate access that can help your business grow. 


In addition to sect data, eTrust also provides a single view of your security environment, so you can make real-time 


decisions based on comprehensive information. If you're looking for ways to minimize risk while maximizing your 
potential, or to get a white paper, go to ca.com/security 


Computer Associates® 


3 Computer Associates International, inc. (CA). All rights reserved 
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to drive down long-term support costs while boost- 


ing business benefits. Page 23 
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Speakers Clash in Spirited 
Debate Over IT Relevance 


BY KATHLEEN MELYMUKA 
AND TODD R. WEISS 
PALM DESERT. CALIF 


OES information 
technology matter 
anymore? In a sharp 
debate that marked 
the end of Day 1 of Computer- 
world’s Premier 100 IT Leaders 
Conference, author Nicholas 
G. Carr asseried that IT has 


Companies 
should have a bias 
to spend less year 

over year for IT. 
Follow, don’t lead. 
Even small delays 
can save you lots 
of money and risk. 
NICHOLAS G. CARR 


| 
| 


largely lost its ability to pro- 


vide companies with a com- 


petitive advantage, and Bob 

Metcalfe, the inventor of Eth- 

ernet, rebutted Carr’s views. 
The users in attendance 


| were so enthralled by the 
| speakers’ arguments that they 


continued to question them 


| for a half-hour after the ses- 
| sion was scheduled to end. 


Carr, a former editor at Har- 
vard Business Review, began 


| by recounting his article “IT 


| Doesn’t Matter,” which ran 
| last year in that publication 
| [QuickLink a3330]. In the arti- 


cle, he argued that IT applica- 
tions and infrastructure, 
though essential to business 


| and integral to business proc- 
| esses, have become so easily 
| replicable that they no longer 


provide sustainable competi- 
tive advantage. 

“When everyone is at parity, 
profit goes to customers, not 
to the bottom line,” Carr said. 

Like railroads, telephones 


and electricity, IT has become 
| part of the general business in- 
frastructure — absolutely nec- 


essary to compete but no 


| longer strategic, he said. Com- 
| panies still don’t realize this, 
and as a result, they spend 


much more aggressively on IT 


| than they should, Carr added. 


| Today, Carr said, risk man- 

| agement in IT is more impor- 
tant than innovation, and the 

| biggest risk is overspending. 
“Companies should have a bias 

| to spend less year over year for 

| IT,” he said. “Follow, don’t lead. 

| Even small delays can save you 

| lots of money and risk.” 

| But Metcalfe, the inventor 

| of Ethernet and currently a 

| principal at Polaris Venture 
Partners Inc. in Waltham, 
Mass., came out swinging. 





“Carr has called you impa- 
tient, sloppy, wasteful, lavish 
spenders, counterproductive 
and lured into passivity by a 
chorus of hype,” he said. “So 
many people have debunked 
Carr before me that I feel like 


| Elizabeth Taylor’s ninth hus- 
| band: I know what to do, but 


how do J make it interesting?” 
Metcalfe argued that IT 
matters to the tune of $1.8 tril- 
lion in IT spending in 2003, 
according to figures from IDC 


| in Framingham, Mass. And 


yet, he said, Carr concludes 


“that you people should stop 


spending wildly, stop being 
suckers, stop squandering cor- 
porate assets unless you want 


| to end up on some Sarbanes- 


Oxley perp walk.” 
Metcalfe said Carr chose to 


| cite only studies that support 
| his thesis. “Studies have shown 


that studies show what they’re 


| intended to show,” he said. “Be 


suspicious of studies.” 

The unsung heroes in the 
innovation machine are the IT 
leaders in the Premier 100 au- 


| dience, Metcalfe said. “If 

| Carr’s advice is followed, how 
| will new technologies find 

| markets and be perfected? 

| Who will provide testbeds?” 


Finally, he said, Carr is not 


| only wrong, but he’s also dan- 
| gerous because “he has suc- 

| ceeded in misleading the vast 
| majority of Harvard Business 

| Review readers, who read only 
| the titles.” Unless his views 


Building a Plug-and-Play IT Staff 


BY THOMAS HOFFMAN 
PALM DESERT, CALIF 


IT executives at many companies 


are exploring ways to make their 


thinly stretched staffs more modu- 


lar and responsive in order to 
quickly move people between 
business units and projects. 
Developing an agile IT staff “is 
a significant challenge that we've 
spent a lot of time addressing,” 
said Martin Colburn, chief tech- 
nology officer at the National As- 
sociation of Securities Dealers 


Inc. (NASD) in Rockville, Md. Col- 
burn was one of several IT execu- 


Computerworld’s Premier 100 IT 


| 
tives who discussed IT staffing at 
Leaders conference here last 


week. When Colburn became 
CTO for the organization that reg- 
ulates the Nasdaq Stock Market 
three years ago, his group was 
spending 75 to 80 cents on main- 
tenance for every dollar spent on 
application development, he said. 
To lower those costs and free up 
IT staff, NASD last year began 
sending some application mainte- 
nance work off-site, starting with 
non-mission-critical applications. 
As a regulator of a securities 
market, said Colburn, NASD has 
to develop nearly all of its soft- 
ware applications in-house. “It's 
not like there's a lot of off-the- 
shelf software we can use to do 
this,” he said. But because NASD 
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are thoroughly debunked, 
Metcalfe said, “today’s current 
crop of MBAs will be running 
WordPerfect on 286s,” and 
American ingenuity will be 
“strangled in the bassinet.” 

The debate stirred a wide 
range of reactions from the 
audience. 

Roger Zakharia, director of 


“My concern was his logic,” 


| Zakharia said. “If as an [IT] in- | 


dustry, we do not take calcu- 


| lated risks and invest money 
| into these [new] products, 
| eventually, directly or indi- 


rectly, that’s going to halt the 


| innovation cycle, and that’s 
| going to have an even more 


detrimental negative impact 


; PREMIER 100 


| had valid points. There are 
two sides to every story, an 

| somewhere in the middle, 
there’s the truth. That’s very 


SPARRING WITH CARR 
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debate, visit our Web site: 


| apt in this case.” 
Thomas Hupf, director of 
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“If you only have a short time 
to have your sustainable advan- 
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| information systems for busi- 

| ness safety and regulatory 
compliance vendor J.J. Keller 
& Associates Inc. in Neenah 
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information systems for the 
restaurant technology support 
field service of hamburger 
chain Jack in the Box Inc. in 
San Diego, said he disagrees 
with Carr’s conclusions but 
can understand his cautionary 
message about not jumping 
into new technologies too 


quickly. 


| on our business.” 
James Barry, vice president 

| of development for payroll and 
human resources applications 
at Automatic Data Processing 
Inc. (ADP) in Roseland, NJ., 

| said Carr made some valid 

| points in his presentation but 

| Metcalfe “made the same ar- 
gument I would make.” 


tage” over competitors, Barry 
said, “that means you have to 

be even faster with IT,” rather 
than slowing your investments 

| as suggested by Carr. Barry said | 

ADP and its competitors make 
improvements in their prod- 
ucts, and then they copy one 
another in a cycle of bringing 


Wis., said he thought that 
“Carr won the debate but lost 
the argument.” The bottom 
line, he said, is that IT innova- 
tion is good, as long as a busi- 
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ness can capitalize on it for a 
worthwhile period of time. “If 
you can either extend the win- 
dow of opportunity or figure 
out how you're going to capi- 
talize on it in the window you 
have, then it makes sense to 
do it,” Hupf said. 
Carr, though, incorrectly 

dismissed such a strategy, 

| Hupf said. “There will be a lot 
of one-hit wonders. But if you 
can figure out how to take ad- 
vantage of that window, do it 

| — even if your window’s a 
short one.” 

By always moving forward 

with IT innovations, even if 

| competitors quickly adopt 
them, a company can show 
customers that it’s on the lead- 

| ing edge of development, 
which can attract new cus- 
tomers, Hupf said. “A pattern 
of innovation” tells customers 
you're ahead of the curve and 

| worth doing business with, he 


| said. @ 45408 


improvements for customers. 
“It’s very important [to keep up 
with one another], but it does- 
n’t give us a sustained advan- 
tage,” he said. 
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conclusions were completely 
| off base. 
| Roger Reeg, senior vice 
| president of systems develop- 
| ment at MasterCard Interna- 
| tional Inc. in O’Fallon, Mo., 
| said he agrees with Carr’s po- 
| sition that IT has become 
| more infrastructure-centered, 
| rather than innovative. “We 
| are managing a lot more infra- 
structure, as opposed to the 
| revolutionary types of things 
| that happened in the past,” 
| Reeg said. “I actually thought 
| that both [Carr and Metcalfe] 


The phrase Web services 
just seems to make their eyes 
glaze over (and we all know it’s 
pretty hard to explain). Better 
te just say what business prob- 
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is able to farm out a fair amount of its 
application maintenance, it has been 
able to lower its software support 
costs “to about 25 cents on the dol- 
iar,” he said. 

Bruce Philipoom, assistant vice 
president of database administration 
at Raymond James Financial Inc., a 
financial services firm in St. Peters- 
burg, Fla., said he believes the ability 
for IT organizations to be more re- 
sponsive to business-unit demands 
“is centered more around having ma- 
ture processes.” 

Philipoom maintained that if an IT 
organization has mature business 
processes and an effective IT gover- 
nance plan, “you can more easily re- 
act to changing business condi- 
tions,” in part by tapping contract 
help as needed. 

Another financial services firm, Al- 





liance Capital Management LP in 
New York, has bolstered its applica- 
tion development staff from about 
92 people to 100 over the past six 
months, said Richard K. Ronan, se- 
nior vice president of global invest- 
ment management technology. 


Convincing Business People 
But while Alliance Capital Manage- 
ment has sent some of its applica- 
tion maintenance offshore to reduce 
costs, Ronan said he’s still undecid- 
ed about how to sell business man- 
agers on the concept of sending 
some development work overseas. 
“If we add five offshore developers at 
the cost of one U.S. developer, busi- 





ness executives will want to know 
whether they're delivering one-to- 
one productivity with our developers 
here and how the economics of this 


would play out,” said Ronan. 
Programmers at his company are 
nearly all cross-trained on develop- 
ment skills such as Java, C++ and C#, 
Ronan said, “so that we can more eas- 
ily move them from project to project, 
depending on where they fit best.” 
Companies that have been grow- 
ing their IT staffs, as Raymond 
James and Alliance Capital Manage- 
ment have done, remain exceptions. 
Most companies with pared-down IT 
departments continue to struggle to | 
deliver daily tech support and appor- 





tion technicians to a backlog of IT 
projects that piled up when the 
economy went soft. 

J.R. Simplot Co. had to reduce the 
size of its global IT staff by about 10% 
to around 340 people 18 months ago, 
said Roger Parks, vice president and 
CIO at the food and agribusiness con- 


BD ive ciishore 


developers at the 


cost of one U.S. 
developer, busi- 
ness executives 


will want to know 


whether they’re 
delivering one-to- 
one productivity 
with our develop- 


ers here. 


RICHARD K. RONAN, SENIOR VICE 
PRESIDENT OF GLOBAL INVESTMENT 


MANAGEMENT TECHNOLOGY. 


ALLIANCE CAPITAL MANAGEMENT LP 


| glomerate in Boise, Idaho. 
; — But Parks began changing the 

company's IT governance model to a 
| more decentralized approach when 
| he came aboard four years ago, and 
| as a result “we've been abie to put 
more IT people to work directly in the 
business units to better support their 
| needs,” he said. 

Under the decentralized model, IT 
workers are distributed throughout 
J.R. Simplet’s business divisions, but 
the IT department itself still controls 
technology spending. 

Parks said that he believes the 
approach has enabled his staff to 
deliver IT projects that are better 


That has helped the company reduce 
its 1T spending by about 23% over 
the past four years, Parks said. 


| 

| 

aligned with business specifications. 
| 

| @ 45418 
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Panelists Offer Tips on 
Improving IT Security 


BY GARY H. ANTHES 

PALM DESER ALIF 

A panel of IT managers told 
attendees at Computerworld’s 
Premier 100 IT Leaders Con- 
ference here last week that the 
federal government has had 


CREDIT DUE 


In the opening keynote 
speech, America 


Co. CIC 


Bd 48) ao) 
Ret 
a framework to answer the 
question, “Do our technol- 
ogy investments generate 
adequate value?” 


some positive impact on cor- 
porate security, mostly via 
regulation and legislation such 
as the Health Insurance Porta- 
bility and Accountability Act 
of 1996. 

“T will tell you that your 
health data is significantly 
more secure today than it was 
yesterday,” said Linda Reino, 
who is the CIO at Universal 
Health Services Inc. in King of 
Prussia, Pa. 

Reino added that govern- 
ment agencies such as the U.S. 
Food and Drug Administration 
have helped her strong-arm 
reluctant vendors into making 
their products more secure. 

New, wide-ranging govern- 
ment regulations helped push 
The Guardian Life Insurance 
Company of America to estab- 
lish a “holistic approach” to 
risk management, said Marc S. 
Sokol, Guardian Life’s chief se- 
curity officer. The New York- 


based company created the po- | 


| sition of computer security of- 
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ficer, which has responsibility 
for IT security but also over- 
sees physical security, disaster 


Consolidation Remains 
High on IT Pros’ Agendas 


BY PATRICK THIBODEAU 

PALM DESERT, CALIF 

The drive to consolidate servers and 
data centers began in eamest after 
the dot-com bust as a remedy for the 
excesses of rapid IT growth in many 
enterprises. And consolidation re- 
mains a top IT issue for a lot of rea- 
sons, even if some of the cost sav- 
ings aren't exactly what vendors 
promise. 

Vendors “get all excited about 
how you can get all this benefit from 
server reduction,” said Gary 
Shanker, director of information sys- 
tems enterprise infrastructure ser- 
vices at Arizona Public Services 
Corp. Shanker cited claims that as 
many as eight servers could be easi- 
ly reduced to one, but he said the 
best he has been able to do is con- 


solidate four servers to one at the 
Phoenix-based utility. Limits on the 
ability of a server to support multiple 
applications without conflicts have 
restricted further consolidation, 
Shanker said. 

Many of the IT managers inter- 
viewed at Computerworld’s Premier 
100 IT Leaders Conference here last 
week said they're involved in exten- 
sive server or data center consolida- 
tion projects. And while their views 
vary about a consolidation’s poten- 
tial for savings, they said there are 
many reasons for undertaking one. 

Compliance with the Sarbanes-Ox- 
ley Act wasn't a consideration when 
Michael Gaynor, senior vice president 
and CIO at Federal-Mogu! Corp., be- 
gan his consolidation effort 18 months 
ago. But improving the ability to audit 


| recovery and other risk man- 

| agement functions, he said. 

| Panelists said it’s sometimes 
hard for IT managers to strike 

| a balance between customer 
service and security. 
to be an enabler; you don’t 
want to always say no,” said Al 
Brusewitz, chief information 
security officer and CIO for 
the County of Los Angeles. 

They agreed that employee 
education — while “not sexy,” 
as one panelist put it — is re- 
ally the linchpin for security. 
William Farrow, CIO at the 
Chicago Board of Trade, said a 
woman cleaning a conference 
room there became suspicious 
of a laptop left running 
overnight. She reported it to 
security, and it was later dis- 
covered that someone had left 
the laptop running port-scan- 
ning software aimed at the 
corporate network. 
Asked how the Board of 

Trade had gotten even low- 


| level employees to be so savvy 


about security, Farrow an- 
swered, “We scare people.” 
Adherence to security princi- 


| ples is part of the employee 


contract, he said. 
Senior managers have to be 
educated, too, but you have to 


| communicate with them in 


ways they can relate to, Sokol 


IT in order to meet compliance re- 
quests has since emerged as a key 
reason behind his effort. 

The Southfield, Mich.-based sup- 
plier of automotive components con- 
solidated nine data centers into one 
last year and plans to take out nine 
more this year. The goal is to reduce 
the number of data centers to two: 
one in the U.S. and one in Europe. 

Gaynor said consolidation is also 
an essential step when considering 
outsourcing. Federal-Mogul runs its 
IT systems in-house, but Gaynor said 
he’s looking at strategic sourcing of 
his IT infrastructure - something he 
can't do until he cuts his own costs. 

“What you need to do as a busi- 
ness manager is first clean up your 
own house,” said Gaynor, adding 
that if he doesn’t reduce his costs, 
an outsourcer will take those sav- 
ings. Once a company saves money 
through consolidation, “if you can 
get another 25% or 30% out of an 
outsourcer, it might make it worth 
something,” he said. 


“You want | 
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The panel discussed ways to respond to IT security demands. 


| said. “We don’t talk about port 


scans or buffer overflows,” he 
said. “We talk about informa- 
tion disclosure.” 

Reino offered this advice on 
employee education: “Make it 
a part of daily conversation in 


| every project meeting. We 


make it clear that every proj- 
ect has responsibility for secu- 
rity. You have to make it part 
of day-to-day operations.” 

She also said it’s important 
to publicize employee-caused 
security incidents internally, 
not necessarily naming the 
employee who made a mis- 
take, but doing it in a way that 
others learn from the error. 

Panelists singled out wire- 
less and mobile computing as 
sources of special concern but 
said limiting their use isn’t a 


Ken Hair, IT director at the Detroit 
Medical Center (DMC), has been 
consolidating servers for five years 
to ease support and maintenance 
and to cut costs. The consolidations 
often come in response to new ac- 
quisitions by the 12,000-employee 


health care organization, which oper- 


ates 10 hospitals, two nursing cen- 
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solution. Modern medicine 
demands that hospital workers 
carry wireless devices, Reino 
said, but wireless networks 
must be protected by encryp- 
tion and intrusion-detection 
software. 

Rob Clyde, chief technology 
officer at Symantec Corp., said 
strong encryption for wireless 
is necessary but not sufficient. 
“It’s not enough for worms 
and viruses; worms can crawl 
right through,” he said. 

Several panelists said they 
equip employees’ home and 
mobile PCs with the same se- 
curity software, such as anti- 


| virus software, that’s used in 
| the office. 
| antivirus product you use,” 
| Reino said. 


| your decision.” @ 45422 


“We mandate the 


“We can’t live with 


ters and other facilities in Michigan. 
Application conflicts sometimes 
arise, and if Hair is dealing with a 
unique application, he may leave it 
on its own server. But many DMC 
hospitals share applications, so 
much of Hair’s work is focused on 
physical consolidation, such as using 
blades and racks and sharing a com- 


at Humber College, a Toronto-based 
institution with more than 45,000 
full- and part-time students, said 
server consolidations require costly 
testing to ensure that applications 
don't conflict. Centralizing also in- 
creases the possibility that a security 
breach on one server could lead to a 


to me than the cost of a server,” said 
Naylor. “My people resources are 
very limited, so it's easier for me to 
go buy another server.” @ 45421 





ROBUST OBJECTS 
ROBUST SOL 


GET DATA IN THE 


BLINK OF AN EYE 


For your next generation of applications, move 
to the next generation of database technology. 

Caché is the post-relational database that com 
bines high-performance SQL for faster queries and 
an advanced object database for rapidly storing 
and accessing objects. With Caché, no mapping 
is required between object and relational views of 
data. That means huge savings in both development 
and processing time. 

Applications built on Cache are massively scala 
ble and lightning-fast. Plus, they require minimal or 
no database administration. 

More than just a database system, Cache incor- 
porates a powerful Web application development 


environment that dramatically reduces the time to 
build and modify applications 

The reliability of Cacheé is proven every day in 
“life-or-death” applications at thousands of the world’s 
largest hospitals. Cache is so reliable, it’s the leading 
database in healthcare — and it powers enterprise appli 
cations in financial services, government and many 
other sectors. 

We are InterSystems, a specialist in data manage- 
ment technology for twenty-five vears. We provide 
24x7 support to four million users in 88 countries. 
Caché is available for Windows, OpenVMS, Linux and 
major UNIX platforms — and it is deployed on systems 
ranging from two to over 10,000 simultaneous users. 
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Make Applications Faster 


Try a better database. For Free. 


Download a tree, fully-tunctional, non-expiring version of Caché or request it on CD at www.InterSystems.com/1 
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Sears, CSC Start 
Outsourcing Talks 
Sears, Roebuck and Co. said it 
will negotiate an IT outsourcing 
deal that’s expected to be worth 
about $2 billion over the next 10 
years with Computer Sciences 
Corp. If the companies agree on 
a contract, CSC would take over 
management of the retailer’s 
systems, networks and decision- 
support technology. Sears CIO 
Gary Kelly told Computerworld in 
January that he planned to out- 


source much of the company’s IT 
infrastructure [QuickLink 44112]. 
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Oracle Must Share 
Discount Data 


A federal judge ordered Oracle 
Corp. to give the U.S. Depart- 
ment of Justice information 
about the discounts it has offered 
to software buyers. The judge 
agreed with the DOJ that the in- 
formation could be material to 
the lawsuit the agency filed in an 
attempt to block Oracle’s hostile 
takeover bid for PeopleSoft Inc. 


PRL A PELE ANSEL RE 


IT Savings at DHS 
Unclear, GAO Says 


The U.S. General Accounting 
Office released a report saying 
that it’s unclear how much, if 
any, money has been saved by 
the U.S. Department of Home- 
land Security’s consolidation and 
integration of systems from 22 
federal agencies. DHS officials 
relied upon “an informal and un- 
documented process” to review 
and approve more than $4 billion 
in IT investments, the report said. 


Short Takes 
HEWLETT-PACKARD CO. said it 
plans to buy TRULOGICA INC., a 
Dallas-based developer of soft- 
ware that manages end-user ac- 
cess privileges across multiple 
systems. . . . COMPUTER ASSOCI 
ATES INTERNATIONAL INC. has 
bought MIRAMAR SOFTWARE INC., 
a Santa Barbara, Calif., vendor of 
desktop migration tools. 


MARK HALL 
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AIG Gives End 
Users Less Info ... 


...in order to get them the right answers to their queries on e-com- 
merce Web sites. Or that’s the theory. Cliff Conneighton, senior vice 
president of marketing at Art Technology Group Inc. in Cambridge, 
Mass., argues that sites using traditional search tools overburden peo- 
ple with too many possibilities. “They often get too much information 
to make a decision,” he says. ATG’s answer? “We'll give them as few 
answers as possible, maybe just one,” he proclaims. “Hopefully, the 


’ 


only one. 
in the form of ATG’s Adaptive Customer 
Assistance (ACA) module to the ATG 
Commerce Package. What makes Con- 
neighton so cocksure that the $20,000 
ACA module will work is that it ties 

a site’s content to user profiles in its 
knowledge base. “We're not just indexing 
random data on the site,” he says. ® Also 
at month’s end, ATG will ship its Cam- 
paign Optimizer module, which uses a 
GUI tool so simple even marketing man- 


’ The one, true answer machine will arrive at the end of March 


the building. # Silicon Valley has its garages, 
Oregon has its barns. That’s where Musi- 
cian’s Friend Inc. started its mail-order 
music-equipment business in Medford, 
tucked in the southwest part of the state. 
The 20-year old company is now part of 
Westlake, Calif.-based Guitar Center Inc., 
a $1.2 billion distributor of musical gear. 
And it’s moved from stacking guitar cas- 
es on hay bales to putting them in a cav- 
ernous 250,000-square-foot distribution 


agers can use it. It lets 
users define, create and 
conduct their own prod- 
uct-comparison tests. Do 
blue sweaters on models 
sell better than yellow 
ones on hangers? Who 
cares? Certainly not you any 
longer, because with the 
new tool, marketers 
won't be asking you to 
create those time-con- 
suming comparison pro- 
grams. At $50,000, it’s 
probably a cheap price to 
keep those marketing 
types out of your part of 


IBM Bundles Storage Management Tools | 


BY LUCAS MEARIAN 


| IBM last week announced a 


storage software suite that it 
said at least partially fulfills a 
utility computing plan to let 
storage devices be centrally 
managed and automatically al- 
located to application servers. 
The new suite, called Total- 


| Storage Productivity Center, 


supports the discovery, moni- 
toring and provisioning of 
disk and tape arrays as well as 
storage networking equip- 
ment. IBM’s rollout matches 
recent moves by EMC Corp. 


BUSS Mee Mee cle 
ca in Fairfield, N.J., will ship 
PUR MU MPU) 
printers equipped with soft- 
ware from Notable Solutions 
Inc. (NSi) in Gaithersburg, 
MCR r tee crt le ry 
documents processed by the 
printer into a variety of docu- 
ment management systems. 
NSi’s five-year exclusive con- 
tract with Hewlett-Packard 
Co. expired this year. 


center in Kansas City, Mo. 
And it runs a major e-com- 
merce site along with a 
300-person call center in 
Salt Lake City. The catalog 
and Web business are split 
equally. The IT opera- 
tions, still based in Med- 
ford, have been touted as 
the reason the company 
did so well financially in 
2003, growing its profits by 
46%. In its most recent 
earnings release, the com- 
pany said, “Solid supply 
chain execution enabled 
us to capitalize on high 
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traffic at our Guitar Center stores and, 


| as a result of our improved infrastructure 

| and systems at Musician’s Friend, we were 
| poised to take advantage of increased In- 
| ternet demand.” While giving the lion’s 


share of the credit to his team and man- 


| agement for their work and support, DJ. 
| Buell, director of IT at Musician’s Friend, 
| also has kudos for Verastream, a well- 

| established integration tool from WRQ 

| Inc. in Seattle. Buell puts it at the center 
| of both the company’s “marry-up” inven- 
| tory application and its ability to link 

| Web operations so easily to its HP 3000 

| legacy system, referred to in the press 

| release. He’s particularly jazzed about 

| Verastream’s object-oriented design. 

| Code written for its pilot project years 

| ago is still useful today, he says. Vera- 


stream will also be crucial during the in- 
evitable massive applications migration 
effort when the HP 3000 gets reluctantly 
put out to pasture, sometime in late 2005. 

® So Buell will be pleased when later this 
month WRQ ships Verastream 5.5. Ac- 
cording to Shaun Wolfe, WRQ’s president 
and chief operating officer, in addition to 
freshening up the GUI, the upgrade will 


| “smooth out the differences between Java and 
| .Net.” Wolfe says, “While it may be ina 


company’s best interest to stick to either 


| Java or .Net, they always end up with a 


| hybrid environment.” ® Some applications 


| can never run too fast. That’s the logic be- 


| hind the product strategy at NetScaler 


| Inc. in Santa Clara, Calif. It ships appli- 
| ances that boost the performance of soft- 


ware by managing TCP/IP connections 


| more efficiently and applying compres- 

| sion of higher-level protocols such as 

| HTTP traffic. By fall, the company says it 
| will ship an appliance that will be able to 


| apply advanced compression/decompression 


| techniques on TCP traffic, which can be par- 


ticularly useful for SLA-dependent appli- 
cations used inside a VPN. @ 45413 
Storage Management Initia- 
tive Specification, a set of 
common models and applica- 


and Veritas Software Corp. 
Mike Fisch, an analyst at The 
Clipper Group Inc. in Welles- 
ley, Mass., said IBM is moving 
closer to allowing storage ca- 
pacity to be provisioned on de- 
mand. But like its competitors, 


| IBM still lacks in-depth inte- 
| gration with hardware made by | 


other vendors, he added. 
“It’s like a jigsaw puzzle, 


| and they’re throwing all these 
| pieces out onto the table,” 

| Fisch said. “It’s hard for us... 
| to put it all together and un- 

| derstand how it fits. But it 


| does fit somewhat, and they’re 
taking some good steps to- 
ward realizing this vision.” 

TotalStorage Productivity 

| Center combines Tivoli SAN 

| Manager and Tivoli Storage 

| Resource Manager with a 

new device discovery tool 

called Tivoli Multiple Device 


| Manager. 


Jeff Barnett, manager of 
market strategy at IBM’s soft- 
| ware division, said the device 
management tool is designed 
| around the Storage Network- 
ing Industry Association’s 


| tion programming interfaces 


| that will let storage manage- 


ment applications control disk 


| and tape devices from differ- 


ent vendors. 

The new suite works with 
Enterprise Storage Server disk 
arrays, known informally as 
Shark, plus IBM’s midrange 
FAStT arrays and SAN Volume 


| Controller virtualization soft- 


ware. IBM said the new prod- 
uct also supports some func- 
tionality on arrays made by Hi- 
tachi Data Systems Corp. and 


| Hewlett-Packard Co. @ 45419 
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Senses increased demand for raincoats. 

2. Responds to demand automatically. 
Senses increased Web iraffic 

4. Responds to traffic automaticaiiy. 
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U.K. Agency Pulls 
Plug on EDS Deal 


The U.K. National Health Service 
said it has pulled out of a 10-year, 
$166 million contract that called 
for Electronic Data Systems Corp. 
to install a centrally managed 
e-mail system. The agency signed 
a similar deal with British Tele- 
communications PLC last year, 
one year after EDS was awarded 
its contract. EDS said it had been 
meeting its contractual obliga- 
tions and will seek compensation 
for the termination of the deal. 


Dell Adds VMware 
Tools to Servers 


Dell Inc. said it will bundle server- 
virtualization software developed 
by VMware Inc. with some config- 
urations of its PowerEdge servers. 
The deal expands Dell’s technol- 
ogy partnership with EMC Corp., 
which acquired VMware in Janu- 
ary. Del! will also handle first- 
level technical support calls on 
the VMware tools, which are be- 
ing offered on the servers along 
with EMC’s Clariion disk arrays. 


Microsoft Patches 
Three Security Flaws 


As part of its monthly security up- 
dates, Microsoft Corp. issued 
patches for Qutlook, MSN Mes- 
senger and the Windows Media 
Services software included with 
Windows 2000. The company ini- 
tially didn’t rate any of the securi- 
ty flaws as “critical,” but it later 
upgraded the severity of the Out- 
look flaw to that level. Separately, 
Microsoft released a third service 
pack of security updates and bug 
fixes for Office XP. 


OS MIL ONE PRT hay SETA RARE 


Short Takes 


Antivirus software vendors warned 
about a new variant of the SOBER 
e-mail worm that masquerades as 
a security patch from Microsoft. 

. .. IBM is buying Trigo Technolo- 
gies Inc., a Brisbane, Calif.-based 
vendor of software for storing 
product-related information, for 
an undisclosed price. 


Vendors Eye Cheaper 
Switching at Net Edges 


Foundry, Extreme expand product lines 
for connecting PCs to core networks 


BY MATT HAMBLEN 


OUNDRY Networks Inc. 


and Extreme Networks 

Inc. today plan to sepa- 

rately announce edge- 
switching technology that 
promises users lower costs 
and improved functionality. 

San Jose-based Foundry is 
introducing two FastIron Edge 
X-Series rack-mounted switch- 
es that offer 10 Gigabit Ether- 
net uplink capabilities to core 
networks at a price of $3,250 
per port. That’s about half the 
cost of chassis-based switches, 
Foundry officials said. 
Extreme in Santa Clara, 

Calif., is announcing that its 
Unified Access architecture 
and Power over Ethernet ca- 
pability will be extended to 
its Alpine 3800 series switch- 
es, which can be used in small 
core networks or on network 
edges. Extreme has offered 
Unified Access since last 
April on its Summit 300 edge 
switches to provide wired and 
wireless access on a single de- 
vice that also supports Power 
over Ethernet. That frees IT 
managers from needing to 
have separate infrastructures 
for wired and wireless LANs. 


Keeping Up With PCs 
Edge switching accounts for 
about 40% of all switch rev- 
enues, said Joe] Conover, an 
analyst at Current Analysis 
Inc. in Sterling, Va. He added 
that there’s a constant need 
for innovation at the edges of 
networks to keep up with new 
technologies in desktop PCs 
and other end-user devices. 
The Information Sciences 
Institute (ISI) at the Universi- 
ty of Southern California this 
week plans to begin testing 
Foundry’s new X424 and X448 


| switches inside 12 wiring clos- 


ets, using the devices to con- 
nect 350 PCs to a data center 
in Marina del Rey, Calif. ISI is 


| bandwidth to com- 


| computing and the 


running 10 Gigabit Ethernet 
between the wiring closets 


| and the data center, said 
| Richard Nelson, the 


institute’s director of 
computing. 
“We're always 


| looking for innova- 
| tion,” Nelson said, 


pointing to the need 
to provide high 


puters that are linked 
for research into grid 


idea of interfacing 


hvu 
NELSON says ISI 
needs switches 
that deliver high 

DT UL 


| computer chips with biologi- 


cal tissues. 
The San Francisco Museum 
of Modern Art has connected 


| 20 wireless access points to 


Extreme’s Summit 300 switch- 
es, partly to take ad- 
vantage of their 
Power over Ethernet 
capability, said IT 
director Leo Ballate. 
He added that the 
Unified Access ar- 
chitecture also pro- 
vides security and 
administration fea- 
tures on the switch- 
es and not in the ac- 
cess points, which 


Cisco Continues Security Push 


| BY JAIKUMAR VIJAYAN 


Who better to deliver network 


security than the vendor of 


most of your networking 
equipment? 

That appears to be the 
thinking behind Cisco Systems 
Inc.’s strategy, as the company 
last week released another 
round of products aimed at 
helping companies detect and 
respond to network intrusions 
more efficiently. 

The products include a new 
IP source tracking technology 
for locating network entry 
points for denial-of-service 


(DoS) attacks, transparent fire- | 


wall support that allows users 
to segment networks into se- 
curity zones and management 
software for Cisco routers. 
Together, the new capabili- 
ties build on Cisco’s Self- 
Defending Network strategy, 
said Steve Collin, a director at 
the company. Under the initia- 
tive, Cisco is trying to build 
technologies that can automati- 
cally detect and respond to net- 
work threats better than stand- 


alone security products can. 


The IP source tracking 


| function, for instance, will 
| make it easier to detect a DoS 





attack and shut down mali- 
cious traffic. Similarly, the net- 
work segmentation that’s en- 
abled by the transparent fire- 


| wall support gives companies 


a way to create “trust zones” 
within a network, Collin said. 
Integrating security at the 
network level is crucial, said 

Jon Duren, chief technology 
officer at IdelAire Technolo- 
gies Inc., a Knoxville, Tenn.- 
based provider of electrifica- 
tion services at truck stops. 
Stand-alone security products 
such as firewalls, intrusion- 


New Products 
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| are more vulnerable to hack- 


ing. Because Unified Access 
will now be available on the 
Alpine product line, Ballate 


| said he would consider mov- 
| ing to those switches as the 

| museum grows, but not for a 
| couple of years. 


Max Flisi, an analyst at 
Framingham, Mass.-based 
IDC, said sales of 10 Gigabit 
Ethernet ports saw a “huge 
uptick” in last year’s fourth 
quarter. Shipments totaled 


| about 5,000 ports, four times 


the third-quarter level, accord- 
ing to Flisi. 

But he added that the tech- 
nology remains a “drop in the 


| bucket in terms of the larger 

| switch market” and ques- 

| tioned how many companies 
| need 10Gbit/sec. throughput 


now. “I’m skeptical as to the 
extent this will be used, but 
it’s future-proofing your net- 


| work,” he said. @ 45423 


detection systems and anti- 
virus software by themselves 
aren’t enough to deal with the 
increasing sophistication of 
network attacks, Duren said. As 
a result, there’s a growing need 


| to find a way to more effective- 
| ly tie such devices together and 
| share the information that’s be- 
| ing gathered, he said. 


Cisco, as the pre-eminent 


| supplier of enterprise network 
| equipment, is in a good posi- 


tion to do that, said Jeff Wil- 
son, director of Infonetics Re- 
search Inc. in San Jose. 

“Cisco really is the only 
vendor that can take this posi- 
tion, because they not only of- 


| fer the security products but 


the network equipment as 
well,” he said. 

But there are caveats. Since 
Cisco is trying to be a one- 
stop shop, its technologies 
may not always measure up to 
products from more special- 
ized vendors. “A lot of compa- 
nies that sell stand-alone 
products would take issue 
with the quality of the individ- 
ual [security] components that 
Cisco has,” Wilson said. 

Also, over the long term, 
Cisco is going to have to ad- 
dress issues such as Web ser- 
vices and application-level 


security, he added. @ 45415 
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Some Wireless IP Phone Users Shun Cisco WLAN Gear 


Change vendors 
despite Cisco's 
‘fast roaming’ 

BY BOB BREWIN 

Despite Cisco Systems Inc.’s 
rollout last June of so-called 
fast roaming capabilities for 
wireless LANs, some IT man- 
agers said they have switched 
to WLAN equipment from 
other vendors because of con- 
cerns about quality of service 
on wireless phone calls. 

Cisco’s WLAN architecture 
is built around smart access 
points, which contain much of 
the intelligence that controls 
handoffs as users roam from 
one location to another. That 
requires wireless devices to 
reauthenticate and obtain new 
IP addresses from back-end 
servers as they’re moved — a 
process that can disrupt voice 
communications, according to 
users and analysts. 

For example, Pacific Sun- 
wear of California Inc. had 
problems supporting wireless 
voice-over-IP calls on a Cisco 
802.11b WLAN that was in- 
stalled to support voice and 
data traffic at its new head- 
quarters in Anaheim, Calif., 
said Ron Ehlers, the clothing 
retailer’s vice president of in- 
formation services. 

Pacific Sunwear equipped 
30 employees with wireless 
VoIP phones from SpectraLink 
Corp. after it opened the 
building last year. But Ehlers 
said that he soon began receiv- 
ing complaints about dropped 
calls when users roamed from 
room to room, especially in 
areas where there was heavy 
data traffic. 


Roaming Improves 

Late last year, Ehlers called 
in Meru Networks Inc., a Sun- 
nyvale, Calif.-based start-up 
that sells a central WLAN 
controller. He said the voice 
roaming problems went away 
immediately after Meru in- 
stalled its equipment. Ehlers 
replaced all 16 of his Cisco 
access points with Meru’s 
controller and access point 
technology early this year. 


WLAN Strategies 


o: Uses distributed installations of access points to control 
WLANs, although it has added support for setting up master devices. 


Pr oxim Corp 


p. Symbol Technologies Inc i other v 


yrs: Offer 


centralized switches and controllers to offload authentication of 
wireless devices as end users move from place to place. 


Sirf Technology Inc., a San 
Jose-based maker of chip sets 
for Global Positioning System 
devices, experienced similar 
problems with SpectraLink 
and Cisco 7920 VoIP phones 
operating over Cisco’s WLAN 
access points, said Ian Chro- 
nister, Sirf’s MIS manager. 

Chronister also replaced the 
Cisco infrastructure with a 
Meru WLAN, a switch an- 
nounced in December. It was 
an unusual move for Sirf “be- 
cause we could be a poster 


child for Cisco,” he said, not- 
ing that his networks are oth- 
erwise all-Cisco. 

Ron Seide, WLAN product- 
line manager at Cisco, said the 
company recognizes that VoIP 
places more demands on its 
WLAN technology than data 
sessions, which can tolerate 
gaps of one or two seconds as 
a user moves from one access 
point to another in a network. 

Last June, Cisco introduced 
what it calls fast, secure roam- 
ing features to its IOS inter- 


networking software. 

Fast roaming is supported 
within a single access point 
that acts as a master device for 
wireless domain services, al- 
lowing quick authentication as 
users roam, Seide said. 

Cisco also detailed a longer- 
term WLAN upgrade strategy 
called Structured Wireless- 
Aware Network, which will 
eventually support central 
management of wireless de- 
vices from its line of wired 
switches and routers. 

Seide said he wasn’t familiar 
with the installations at Pacific 
Sunwear or Sirf. But he added 
that he thinks they could have 
resolved their VoIP problems 
by doing thorough site surveys 
to guide the placement of ac 
cess points and by using Cis- 
co’s fast roaming software. 

Brad Noblet, director of 
technical services at Dart- 


SAP Streamlines Middleware Suite 


BY MARC L. SONGINI 

SAP AG this week plans to un- 
veil a more unified version of 
its NetWeaver middleware 
that’s designed to end some of 
the headaches for users, who 
now need to coordinate the 
applications and integration 
tools that make up the suite. 

SAP last week confirmed 
that it’s moving to align the 
components of the 
NetWeaver suite, 
which includes the 
company’s data 
warehouse soft- 
ware, an integra- 
tion broker and 
other products 
(see box). 

“Going forward, 
we'll update NetWeaver annu- 
ally, with all the pieces being 
updated and synchronized to- 
gether,” said SAP America Inc. 
spokesman William Wohl. 

Eventually, users will be 
able to run the entire suite on 
a single server, something that 
isn’t possible now, he said. 


SAP's data 


and Microsoft 


| The new version will also in- 


clude support for radio fre- 
quency identification tags, 


Cognos updates its reporting 
tools to ease integration with 
warehouse software 


as well as products from IBM 


© QuickLink 45445 
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so users can develop RFID- 
enabled supply chain manage- 
ment processes. Wohl de- 
clined to comment on when 
the upgrade is due for release. 
Some users who are running 
pieces of the middleware suite 
were enthused by SAP’s plan 
to unify NetWeaver, which has 
assumed a central role in the 
software vendor’s long-term 
strategy since it 
was announced 
early last year. 
“The products 
were never built 
to be together at 
the same time,” 
said Mike Perroni, 
vice president of 
IT at Halliburton 
Co. in Houston. That means 
users have to worry about 
whether Net Weaver compo- 
nents will work with one an- 
other, he said. And if there’s a 
glitch with the software, get- 
ting it resolved can be “very 
time-consuming and make the 
process of upgrades very com- 
plex,” Perroni added. 
Halliburton, which offers 
energy, engineering and con- 


struction services, runs SAP’s 
R/3 ERP applications, plus its 
portal and data warehouse 
software. Perroni, who is also 
a director of the independent 
Americas’ SAP Users’ Group 
(ASUG), said that Halliburton 
will look at the possibility of 
running the portal and data 
warehousing technology on 
the same server in the future. 
“Today, every component re- 
quires one or more boxes to 
be installed,” he said. 


Responding to Feedback 
The upcoming improvements 
should help make it easier to 
add third-party applications to 
R/3, said Lori Schock, global 
business process manager at 
silicone products maker Dow 
Corning Corp. in Midland, 
Mich. Schock, another ASUG 
director, said SAP is making 
the changes partly in response 
to feedback from the group’s 
members that “we can’t afford 
to manage multiple releases 
that aren’t synchronized.” 
SAP is trying to keep mid- 
dleware vendors such as IBM 
and BEA Systems Inc. out of 


mouth College in Hanove 
N.H., said he rectifie 
call handoff problems o 
campus WLAN by using the 
fast roaming functio 
Noblet said he doesn’t th 
Cisco’s WLAN architecture 
can scale enough to support : 
planned expansion that will 
provide wireless IP phone ser- 
vice to all 4,000 Dartmouth 
students, plus most faculty 
and administrative staffers 
Dartmouth has tapped Aru- 
ba Wireless Networks Inc. to 
provide the college with its 
switch-based WLAN technol- 
ogy and about 1,000 access 


points, Noblet said. @ 45424 


CAMPUS NETWORK 


and Dartmou WLAN 
QuickLink 45451 
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its ERP installed base by 
throwing in NetWeaver when 
users license its mySAP Busi- 
ness Suite, said Gartner Inc. 
analyst Yvonne Genovese 
‘The whole goal is to bring 
it on as a sin ‘latform at 
1 single price,” she said, not- 
ing one potential downside: 
SAP might focus more on 
making the suite interopera- 
ble than on adding new fea- 


tures. @ 45409 
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Microsoft Likely to Update Win 
Server ’03, but Many Users Shrug 


New edition may collect feature packs 
released since product's 


launch in April 





BY CAROL SLIWA 
ICROSOFT Corp. 
confirmed earlier 
this month that it 
will likely intro- 

duce an update to Windows 

Server 2003 that includes the 

add-on feature packs it has 

released since the product 
shipped last April. 

But for some users of those 
features, it’s not a big deal. 

“We are getting what we 
need separately. So is that an 
attraction? Not necessarily,” 
said Larry Godec, CIO at First 
American Title Insurance Co. 
in Santa Ana, Calif. 

“It would be nice if they 
were there, because you 
wouldn’t have to go looking 
for them,” said Keith Gilbert, 
an enterprise data architect at 
Labor Ready Inc. in Tacoma, 
Wash. “But it’s not a huge is- 
sue. The fact that they're out 
there and you can go get them, 
it’s easy enough.” 

But Jeff Price, a senior di- 
rector in Microsoft’s Windows 
Server group, said many cus- 


Continued on page 1 


Diversity 


“Small suppliers are some of 


our best and most creative 
partners in technology,” added 
Linda Dillman, CIO at Ben- 
tonville, Ark.-based Wal-Mart 
Stores Inc. 

Since 1994, Wal-Mart has 
spent close to $4 billion buy- 
ing technology from small or 
minority-owned businesses, 
and it’s now encouraging its 
major suppliers to do so as 
well. 

Unlike larger technology 
suppliers, small companies are 
generally more flexible and 
willing to accommodate spe- 
cific customer needs, Dillman 
said. They also can bring high- 


tomers have been looking to 
the company to make add-on 
features, such as SharePoint 
Services and the Group Policy 
Management Console, “easy to 
consume” and to have a “high 
level of integration.” 

Price noted that customers 
currently pick and 
choose which fea- 
tures they want to 
add to their servers 
from Microsoft's 
Web site, and he said 
that process “works 
pretty well.” But Mi- 
crosoft thinks it “can 
have even more cus- 
tomer success by 
having that delivered 
in a vehicle that’s 
easier to consume 
and install and man- 
age,” Price added. 

Although the feature packs 
are already designed to be in- 
tegrated with Windows Server 
2003, Microsoft would need to 
release an update to provide 
an administrator with an “in- 
tegrated management and in- 


ly specialized skills that larger 
vendors may not always pos- 
sess, she said. For instance, 
Ateb Inc., a small pharmacy 
systems supplier in Raleigh, 

C., helped Wal-Mart build 
an interactive voice-response- 
based prescription-refill appli- 
cation after larger vendors 
said they were unable to do so 
The 80-employee company 
also maintains Wal-Mart’s in- 
store music and TV program- 
ming systems. 


Less Overhead 

Small companies are usually 
cheaper from a contracting 
standpoint because they don’t 
have as much overhead as 
their larger counterparts, said 
Bruce Carver, vice president 
and CIO at PepsiCo Beverages 


LARRY GODEC says 
First American 
Puma sre ret) 

“just for the sake 
of upgrading.” 


stallation experience” across 
all of the add-on technologies, 
Price said. 

Godec said better manage- 
ment of the overall pieces of 
functionality would be help- 


| ful. But he said his company 


would have to carefully evalu- 
ate what ti gets today vs. what 


| it would gain from the new re- 


lease. “We wouldn't necessari- 
ly upgrade just for the sake of 
upgrading,” he said. 

Gilbert said the 
application testing 
needed to upgrade 
to a new version of 
an operating system 
can be costly and 
time-consuming. “I 
don’t know many IT 
departments that 
take upgrades light- 
ly,” he said. “Every- 
one has to do due 
diligence. You can’t 
just go around up- 
grading because Microsoft has 
put out a new version.” 

Price said the proposed up- 
date to Windows Server 2003 
won't simply be a repackaging 
of the product with existing 
add-on features. He said it also 
may include new technologies 


& Foods in Chicago. 

And having minority suppli- 
ers is also “part of doing good 
business,” especially for com- 


| panies with diverse customer 
| bases, he said. With a large 
| portion of PepsiCo’s growth 


coming in major urban areas 
and among the Hispanic popu- 
lation, “how and who we do 
business with” is becoming 
important, Carver said. 

As a result, PepsiCo, which 


| last year spent only about $20 
| million with minority-owned 


IT suppliers, is taking new 
measures to increase repre- 
sentation of minorities in its 
IT supplier ranks, Carver said. 
For instance, senior technol- 
ogy executives at Pepsi have 
been asked to spend at least 
12% more on minority suppli- 


that have yet to be released. 
“We will consider the broad 
range of technologies that are 
ready at the time we do this 
update,” Price said. “And 
based on customer feedback, 
we'll see what we can put in.” 


| Wants Choice of Features 


A database services manager 
at an international cosmetics 
manufacturer and retailer said 
he would welcome the chance 
to get specific new features 
prior to the next release of 
Windows, code-named Long- 
horn. He said he plans to use 
one of the feature packs that’s 
currently available, Automated 
Deployment Services. “A new 
release inclusive of all these 
tools would be great, as long 
as through the installation 
process, I can deselect those I 
don’t want,” said the manager, 
who asked not to be named. 
But he said there can be a 
downside to having features 
available simply through 
check boxes. For example, the 
manager said he doesn’t want 
Internet Information Server 
enabled on database servers, 
yet some administrators who 
are accustomed to having IIS 


ers this year than they did last 
year. And all senior executives 
are going to be evaluated on 
the basis of “how much busi- 
ness we are doing with mi- 
norities,” he said. 

Small companies tend to be 
more eager than larger ven- 
dors for new business and are 
therefore sometimes more in- 
vested in a project, said Lori- 
lee Sadler, executive vice pres- 
ident at UNext.com LLC. The 
Deerfield, Ill.-based online ed- 
ucation company, which has 
used both large and small sup- | 
pliers in rolling out several en- | 
terprise applications, discov- | 
ered that smaller suppliers | 
display more staff continuity 
and “commitment to our suc- 
cess,” Sadler said. 

Even so, small companies 


www.computerworld.com 


enabled go back and install it. 

If the Windows Server up- 
date emerges, customers who 
purchased Microsoft's Soft- 
ware Assurance plan for the 
product will be able to get it as 
part of their maintenance con- 
tracts. They pay an annual fee 
of 25% of the server license 
cost for Software Assurance. 
Price said Microsoft hasn’t de- 
cided if there will be a charge 
for Windows Server cus- 
tomers who didn’t buy Soft- 
ware Assurance. 

Price added that he’s not 
sure when the server update 
might become available, al- 
though it’s expected before 
Longhorn. 

After initially saying Long- 
horn would emerge in late 
2005, Microsoft hasn’t provid- 
ed a definitive update on the 
expected ship date. Neil Char- 
ney, a director of product 
management for Windows, 
said Microsoft plans to release 
a beta version by the end of 
this year and will re-evaluate 
the ship date based on the 
beta feedback. @ 45417 


"WINDOWS XP RELOADED? 


Speculation grows about a possible interim 
release of Windows before Longhorn 
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For a summary of 
Windows Server 2003 feature packs, 
visit our Web site 
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and suppliers owned by wo- 
men or minorities still need to 
constantly fight the percep- 
tion that they aren’t equipped 
to handle difficult projects, 
said Robert Blackwell Jr., 
founder and president of Chi- 
cago-based application devel- 
oper Electronic Knowledge 
Interchange Inc. As a result of 
that perception, small suppli- 
ers are often forced into sub- 
contracting roles for larger 
technology companies, even 
though they might be the ones 
providing the specialized 
skills, Blackwell said. 
Moreover, “minority compa- 
nies rarely get more than one 
chance” at a project, he said, 
so “there’s a certain amount of 
paranoia about screwing up.” 


@ 45416 





don't be the one ty let the SAN fail 
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You like your job. And the boss likes you - 
as long as the SAN is up and running. 


Keep it that way with NetWisdom and Xgig Analyzer, the SAN monitoring and analysis 
tools that identify catastrophic events before they shut your network down. SAN failure 
occurs after an accumulation of invisible errors. Finisar’s NetWisdom and Xgig Analyzer 
proactively identify and troubleshoot network errors, reducing business losses, tech- 
nology costs, and customer service voids. 


Research shows that SAN downtime can cost organizations $100,000 per minute, 
or more.* NetWisdom and Xgig help you avoid these costs by conducting accurate 
performance tuning and capacity planning. 


When data stops moving, so do the dollars. Be part of the solution: monitor your 
SAN with Finisar network tools and stop degradation, CRC errors and events that can 
impact your most critical business data and transactions. 


Finisar has been speeding up networks and 
delivering best-of-breed products and testing 
solutions since 1988. NASDAQ: FNSR 


View our web seminar, including a customer case study and demo of NetWisdom by 
visiting www.finisar.com/nw www. finisar.com/nw 
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Sybase Data Management solutions help 
healthcare enterprises respond faster 
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reducing the costs and errors of paper- 
based processes. 


Sybaseis the world’s number one 
provider of mobile middleware* 
You lt find Sybase technology at 
work in over 80% of the top 100 
companies in the FORTUNE 500: 


Start your journey to the 
Unwired Enterprise. 
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MARYFRAN JOHNSON 


IT Passion=IT Power 


ASSION CAN PRODUCE amazing results.” 
That’s Shelley McIntyre of The Guardian 
Life Insurance Company of America 
speaking last week at Computerworld’s 
Premier 100 IT Leaders Conference in 


Palm Desert, Calif. She 

was one of more than 700 

IT and business execu- 

tives attending the event. 

(See pages 6-8 and F 
QuickLink a4100 for the " 
full conference coverage.) 

Although McIntyre, a 
VP of business technolo- 
gy services at the New 
York-based insurer, was 
referring specifically to 
Guardian’s award-win- 
ning project involving an 
online annuity system, 
her comment could just as easily sum 
up the impact of two powerful days of 
peer connection and conversation. 

I don’t use the word powerful light- 
ly here. The collective will of IT lead- 
ers can — and should — directly in- 
fluence technology products and the 
vendors that sell them. 

The most striking endorsement of 
that idea came in a talk by Alan Paller, 
executive director of research at the 
SANS Institute [Quick Link 45335]. 
After demonstrating how easily hack- 
ers can break into ostensibly secure 
corporate networks, Paller urged IT 
leaders to use their collective power 
to force vendors to deliver safer soft- 
ware by requiring certain security 
settings. He noted how Oracle has al- 
ready complied with such a demand 
by the U.S. Department of Energy. 

Will Paller’s call to action have a re- 
sult? It certainly should. At least 75% 
of the audience members — surveyed 
after his talk — declared their intent 
to start requiring minimum security 
settings in all future systems purchas- 
es, as well as in the external systems 
connecting to their networks. 

In other audience survey questions 
at the conference [available in a regis- 
tered part of our Web site at Quick- 
Link 45115], we asked the assembled 
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executives to identify their most press- 


ing IT leadership issues 
and most critical projects. 
Topping the leadership is- 
sue list were implementing 
business process re-engi- 
neering, streamlining oper- 
ations and planning the fu- 
ture of the IT infrastruc- 
ture. Singled out as the 
most important IT projects 
were those involving busi- 
ness intelligence/data man- 
agement, enterprise inte- 
gration and Web services. 
Collecting useful, ac- 
tionable ideas about all of those top- 
ics and having the time to talk them 
over with peers are the greatest bene- 
fits of a conference like the Premier 
100. We also staged the first-ever de- 
bate between Nicholas Carr, author of 


~ 


| ° ° 
the infamous Harvard Business Re- 


view article “IT Doesn’t Matter,” and 
Bob Metcalfe, Ethernet inventor and 
now venture capitalist. That exchange 
stirred up its share of passions, as 
well [see Quick Link 45332 for a tran- 
script of the debate]. 


Our theme this year was “Mapping 
the Future of IT,” which may sound 
rather grandiose but is, in fact, what 
IT executives do whenever they get 
together to talk strategy and compare 
best practices. No matter what indus- 
try segment they cali home, CIOs and 
senior IT managers have many core 
issues in common. Vendor issues. 
User issues. Budget issues. Even regu- 
latory compliance issues. 

You can see that commonality even 
within the diversity of the 12 projects 
we singled out of the Premier 100 to 
honor as the “Best in Class” winners 
(see the special supplement attached 
to this page). They include massive 
undertakings like J.P. Morgan’s grid 
computing project, Northrop Grum- 
man’s integration of its multibillion- 
dollar acquisitions and the U.S. Air 
Force’s far-flung server consolidation 
project. They also include an innova- 
tive Web services project at Lincoln 
Financial, an industry-leading central- 
ized call accounting project at Wynd- 
ham International hotels and the cre- 
ation of the state of Ohio’s user- 
friendly, self-service tax-filing portal. 

Yet for all their surface differences, 
each of the winning projects embod- 
ies what so many of our Premier 100 
conference attendees have: That un- 
derlying passion that can and will 
| produce amazing results. @ 45378 
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Using IT to 
‘Tap Experts’ 
Know-how 


HE U.S. GOVERNMENT 
is using basic knowl- 
edge management 


techniques to offer timely 
and valuable advice about how to do 
business abroad. 

At the Department of Commerce, 

a commercial service called the DOC 
Insider is adopting technology for 
knowledge capture and management 
from Bellevue, Wash.-based AskMe 
Corp. The service uses the technology 
to accelerate the counseling it offers to 
U.S. companies seeking to engage in 
international trade. 

The DOC Insider has been using 
Web-based technology to create a 
knowledge network connecting its 100 
offices in the U.S., another 150 in 80 
countries overseas and a group of ap- 
proximately 1,700 
U.S. trade specialists 
who have expertise 
in what it takes to 
succeed abroad. 
These specialists can 
tell you what trade 
show to attend if 
you're interested in 
selling medical 
equipment in Ger- 
many or what papers 
to file if you're trying 
to expand your soft- 
ware business into 
Japan. 

In the past, there was no way to or- 
ganize what these experts knew, or 
even how to get in touch with them 
once they were identified. 

Laura McCall, program manager for 
the DOC Insider, says using AskMe’s 
system is part of the department’s ful- 
fillment of its mandate to help U.S. 
businesses compete abroad. “We have 
a dispersed, worldwide organization 
with pockets of information every- 
where,” she says. The DOC Insider’s 
aim is to help U.S. companies do things 
such as perform international market 
research or locate overseas partners. 
“We want to sit down and make sure 
you’ve identified a good market and 
that you are export-ready,” she says. 

Each trade expert accesses the 
knowledge network via the Web and 
logs answers to questions. “That way, 


Prat FOX is a freelance 
writer in Santa Barbara, 
Calif. Contact him at 
pimmtox®pacbell_net. 
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we're able to identify the people and 
the resources to help clients solve 
problems,” says McCall. 

Before selecting AskMe, McCall 
reviewed the department's business 
processes to see where the gaps in 
information counseling existed. “We 
have a handful of trade specialists who 
know everything about export docu- 
mentation, for example,” says McCall. 
“But if they’re located in Minnesota 
and you weren't in the local office, 
you'd never know they existed.” 

Now these experts can post answers 
according to different subject cate- 
gories, upload documents or even di- 
rect businesses to specialized publica- 
tions online. The information is re- 


usable and is in an expanding database. | 


About 1,200 people have used the sys- 
tem so far, saving about 750 hours of 
repetitive work, says McCall. There’s 
also a reporting tool that managers can 
use to track the technology’s return on 
investment and identify topics that are 
popular so they can beef up their ex- 
pertise in those areas. 

With the huge trade deficit that 
plagues the U.S., a knowledge manage- 
ment system that helps boost U.S. ex- 
ports by making it easier to tap ex- 
perts’ know-how is a clear competitive 
advantage. Similar expertise lies hid- 
den away inside most companies. 


@ 45227 


ALEXANDER 
KATSENELINBOIGEN 


The Peculiar 
Nature of 
Software 


UCH DEBATE on off- 
shoring IT jobs re- 
volves around well- 


known arguments. 

Proponents of offshore outsourcing, 
who are generally averse to protection- 
ist measures, tend to focus on the tra- 
ditional advantages of free trade, such 
as a more efficient allocation of labor 
resources and the benefits of competi- 
tion for the consumer. Detractors spot- 
light the hidden costs of offshore out- 
sourcing, concerns about security and 
the potential loss of skilled IT jobs in 
the U.S. Their remedies include pro- 
posing legislation designed to protect 
IT jobs and setting employment re- 
quirements for companies bidding on 
government projects. 


Recently, an alarm has 
been sounded that high-end 
IT work such as the design 
of software and the devel- 
opment of innovative soft- 
ware is being claimed by 
companies overseas [Quick- 
Link 45069]. If so, it must be 
remembered that software 
has some peculiar aspects, 
including tremendous job- 
creation potential, no mat- 
ter where it’s developed. 

Imagine that a program- 
mer in India writes a pro- 
gram so useful that it cre- 
ates thousands of jobs for 
developers in the U.S. to 
adopt, support and enhance its func- 
tionality. 

New software products have had 
this effect many times; software is of- 
ten not a final product, but instead a 
versatile tool that can be used in the 
production of a broad range of goods 
and services. And advances in software 
can also open up to automation areas 
that were previously off limits. 

From this perspective, software de- 


PONE NH TD ee ge 


Testing the ‘Talent’ 


T TALENT FROM India and China 
has been characterized as dedi- 


Programmer ALEXANDER 
KATSENELINBOIGEN in 
West Orange, N.J., is 
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| Scrap Spyware 


"VE BEEN WAITING for one of the 
antivirus vendors to take the lead 


velopment work spans a 
spectrum that ranges from 
the production of final 
goods to innovative re- 
search and development. 
The simple commodity de- 
velopment work at one end 
of the spectrum resembles 
the manufacturing of con- 
sumer goods, and offshore 
outsourcing may indeed 


end of the spectrum is in- 
novative software develop- 
ment. The potential for 
such software to create 
jobs suggests that even if 


| some of this work is done overseas, 
| there would still be benefits for U.S 


programmers. 
So it’s difficult to assess the ultimate 
impact of offshore outsourcing on the 


| software development market in the 


U.S. Whatever the tally, it’s up to us to 
stay competitive by focusing on tech- 
nology-intensive development that re- 


quires more advanced skills. 


Fortunately, software isn’t a market 


to patch those holes. 
| David J. Berniard 


lead to a partial loss of such | 
jobs in the U.S. At the other | 


| with fixed demand. If enough shirts 
are manufactured in China, none need 

| be made in the U.S., but the same isn’t 

| true of software. Not only is it a market 

| that’s still expanding, but its expansion 
also seems to fuel further expansion. 

| In the foreseeable future, software de- 

| velopment will have a multiplier effect. 
It won't reach a saturation point 

| Ofcourse, any technological innova- 

| tion leads to a shift in the labor market, 

and there are losers and winners. Usu- 

ally, winners aren’t in the same eco- 

| nomic sector as the losers. But given 
the peculiar nature of software, the 

ever-broadening number of areas in 
which it’s applied and the fact that the 
demand for new software is still large- 

| ly concentrated in the U.S., we're in 

| good shape to gain a piece of the pic. 


© 44937 


"ANOTHER POINT OF VIEW 


Computerworld’s Robert L. Mitchell has other 
thoughts about the impact of higher-level !T jobs 


moving overseas. Read his column on page 25. 


More columnists and links to archive 
previous columns are on our W 


| www.computerworld.com/columns 


Sure, hackers love to find holes, ed,” the qualities that make them 
but their discoveries force vendors 


great are bound to their creativity in 
process and direction, not to a char 
acter that is questionable by all oth 





cated, cheap and just as good as 
expensive domestic IT staff. My ex- 
perience has been otherwise. Late 
in 2002, a group of contractors 
came to my company from India to 
work on a pilot project. It was all 
low-profile until a virus we'd thought 
we'd eliminated resurfaced. It 
turned out that the contractors had 
brought the virus in with them. As 


the representative from desktop en- | 


gineering, | spent the most time 
with the contractors as | headed the 
remediation efforts on their laptops. 
| was not impressed. The laptops 
they brought in didn’t follow a stan- 
dard configuration, de rigueur for 
any corporate system in the U.S. 
This could be excused as being typi 
cal of machines in the custody of 
developers, except that nearly all of 
the laptops had seriously out-of- 
date antivirus software and defini- 
tion files, and about half had no 
antivirus software installed at all 
Needless to say, most of these ma- 
chines were heavily infected with an 
assortment of viruses and worms. 
Bill McQueen 


San Francisco 


scripting, but nothing has happened 


(“Think Outside the Gates,” Quick- 
Link 44636]. It amazes me that ma- 
jor corporations are letting a free- 
| ware scriptwriter in Germany take 
| the lead in spyware protection with 
| his Spybot. 
| What's the problem? Spyware 
| and hostile scripts are viruses and 
Trojan horses. 
McAfee and Symantec, I’m wait- 
ing for you to do your jobs. 
Peter Finn 
Sacramento, 
peterfinn@sbcglobal.net 


| 
| 
| in blocking spyware and hostile 
| 
| 


Helpful Hackers 

T COULD BE ARGUED that inci- 

dents like the code leak de- 
scribed in the story “Browser Hole 
Discovered After Code Leak” 
[QuickLink 44850] result in the ex- 
posed product becoming stronger. 
In that case, vendors might want to 
allow third parties, restrained by 
nondisclosure agreements, to re- 
view code to expose security holes 
and vulnerabilities. 








Programmer/analyst, 
New Orleans 


| Managers’ Morals 


MUST OBJECT to both Mark 
Hall's characterization of the best 


| project managers in his column 

| “Thieves Among Us” [QuickLink 

| 44234] and the insinuation that, to 
| succeed, such individuals must be 


less than upstanding characters. | 
would have much preferred to read 


sentiments toasting the creative ge- 


nius of the best project managers 
and their success as a result of the 
latitude afforded them by their ad- 
ministrative heads. 

In reading Hall's commentary, 


| the question arose as to why the 


project managers he described felt 
it necessary to follow clandestine 
tactics in order to achieve their ob- 
jectives in an effective manner. Did 
their management not afford them 
the opportunity or resources neces- 
sary to pursue such endeavors un- 
der less shady circumstances? 
While | agree that the best proj- 
ect managers “aren't single-mind- 


er measures 

To suggest that we recruit project 
managers based on their rap sheets 
S to suggest compromising the 
most valued qualities in an employ 
ee: honesty and integrity. There is 
absolutely nothing that would sug 
gest that those qualities and cre 
ativity are mutually exclusive or t 


| they are inaccessible in project 


| 
| 


managers today 

Galen R. Work Jr. 

Director, Rutgers University 
Computing Services, 
Piscataway, N_J. 


COMPUTERWORLD welcomes 
comments from its readers 
will be edited for brevity and clarity 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701 
Fax: (508) 879-4843 
E-mail: letters@computerworld.com 
Include an address and phone num 
ber for immediate verification 

For more letters on these and 


other topics, go to 
www.computerworld.com/letters 
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BY NOON, THE IT DEPARTMENT WILL BE 
ALERTED TO 750 DIFFERENT PROBLEMS. 


< 
ONE OF THEM WILL LOSE 115 
ONLINE RESERVATIONS A MINUTE. 


CAN YOUR SOFTWARE TELL YOU WHICH ONE? 


Business Service Management solutions from 

BMC Software® can. They automatically prioritize 
IT management issues according to business 
importance and alert you before potential problems 
can impact performance. They also let you prioritize 
IT investments and resource allocations to optimize 
your business results. So you can solidly align your 
IT investments with strategic business goals. And 


© 2004 BMC Software Inc. 


protect the delivery of vital business services like 
online transactions, sales, customer service, logistics 
and distribution— whatever is most critical to’ your 
company’s eee eae a enterprise management 
software that works with your existing IT resources 
to let you manage what matters from a business 
perspective and execute with precision. Find out 
how at www.bmc.com/bsm50 


<bmcsoftware 
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AYBE IT’S THE 
sound of all those 
tapping feet while 
users wait for their 
spreadsheets to 
open. Maybe man- 
agement finally 
woke up to the cost 
of replacing those hard drives one by 
one at remote offices. 

Whatever the reason, many com- 
panies are upgrading to a common 
“sweet spot” of 2.3- to 2.6-MHz Pen- 
tium 4 desktops and 1.6- to 1.7-MHz 
Pentium M notebooks, usually with 
512MB of RAM and a 40GB to 60GB 
hard drive. That much is easy. The 
tougher questions are when to upgrade 
PCs rather than replace them and how 
to use this round of purchases to drive 
down long-term support costs while 
boosting business benefits. Here are 
some tips from those who have already 
struggled to find answers. 


Simplify, Simplify, Simplify 
“We had the ‘Noah’s ark syndrome’ — 
we had two of everything,” says Tim 
Link, CIO at Ohio State University 
Newark and Central Ohio Technical 
College. Over the past three years, he 
has replaced that unwieldy mix of 
1,300 client PCs with one of three stan- 
dard configurations from Dell Inc. PC 
support calls have already dropped 
22%, and Link expects them to be 
down by 30% when final results are in. 
Link has carefully planned how to 
minimize the number of configura- 


helreshing 
iDeskto| 


If you're finally replacing old PCs, buy smart 
to maximize your performance and long- term savings. 


By Robert L. Scheier 





, 24 COMPUTERWORLD March 15, 2004 


Continued from page 23 

tions he must support as he replaces one-third of his 
systems each year. He’s reluctant to go to a four-year 
life cycle for PCs because although that would reduce 
PC purchase costs, it would mean more individual 
models, which would complicate support issues. 

Trying to open files from different versions of ap- 
plications running on various versions of Windows 
is a huge headache for users and IT managers, and 
can be a prime driver for an upgrade. At the North 
Carolina Department of Health and Human Services 
in Raleigh, “it got to the point where a person sent 
an Excel spreadsheet to somebody else, and they 
couldn’t open it” because they were running a differ- 
ent version of Excel, says CIO Don Allen. “That’s 
when we decided we had to do something.” 

By July 1, the department hopes to have replaced 
5,000 of its approximately 18,000 PCs with new sys- 
tems from Hewlett-Packard Co. based on a single 
system “image” of the same processor, operating sys- 
tem and office productivity applications. 


E THIN-CLIENT ALTERNATIVE 


Blade servers - thin, rack-mounted units that use far less 
space and power than big, boxlike servers - have taken over 
the data center. Hewlett-Packard Co. is betting that the next 
step will be a blade PC - a rack-mounted CPU dedicated to 
one user and linked to networked storage for easy data back- 
up and recovery. 

HP’s Consolidated Client Infrastructure, introduced in De- 
cember, “moves all the infrastructure into the data center, where 
it's more secure” and can be more easily maintained, says 
Keith LeFebvre, vice president of business PCs for the Ameri- 
cas region at HP’s Personal Systems Group. The company 
claims that this can cut lifetime PC maintenance costs in half. 

Steve Acterman, director of corporate IT management at 
the Orange, Calif., office of Volt Information Sciences, likes the 
concept because of its similarities to the X terminal environ- 
ment he once managed, where only the user interface ran on 
the client PC and most application logic ran on the server. 

“There were some tremendous advantages in terms of more 
effectively utilizing your computing resources, as well as the 
maintenance and the support,” he says. One possible stum- 
bling block, though, is the cost of any upgrades Acterman 
needs for his WAN to handle the extra traffic. 

Many customers are looking at more centralized or server- 
centric computing models because of the frequent security 
vulnerabilities found in desktops or notebooks running Win- 
dows, says Gartner Inc. analyst Mark Margevicius. As IT 
managers put more of a load on the server, he says, this 
will reduce the need for a new, more powerful client PC on 
the user's desk. 





- Robert L. Scheier 
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Keep It Longer 

“T’ve been in the industry more than a decade, and 
today’s stuff is able to run a lot longer [than earlier 
PCs],” says Roger Wilding, a senior technical engi- 
neer at CNF Inc., a global transportation and logis- 
tics company in Palo Alto, Calif. He’s replacing some 
of his older 12,000 desktops and notebooks with new 
Dell systems and plans to keep them four to five 
years, “waterfalling” the most capable PCs to less- 
demanding users as they are replaced. 

Given typical failure rates, most organizations can 
safely plan to keep a desktop PC four years, says 
Mark Margevicius, an analyst at Gartner Inc. in 
Stamford, Conn. If the system fails after the standard 
three-year warranty period, he suggests replacing it 
rather than spending time to fix it. 

For notebooks, which face rougher handling by 
users, Margevicius suggests sticking to the tradition- 
al three-year replacement cycle. 

The four-year cycle worked fine for John Mont- 
gomery, vice president and chief technology officer 
of Embarcadero Systems Corp., a provider of ship- 
ping terminal management services and cargo man- 
agement systems in Alameda, Calif. By upgrading the 
memory from 128MB to 256MB, he has managed to 
upgrade many older systems so they can run Win- 
dows 2000. 

Some users buy higher-end systems to stretch the 
machines’ life span or reduce the need for future up- 
grades. For example, Link buys PCs with a 3-GHz 
processor and a full gigabyte of memory. “I don’t 
want to have to buy a memory upgrade, I don’t want 
to buy a hard-drive upgrade. I’m looking to get these 
as hands-off as possible,” he says. 

While PC replacement cycles are stretching out, 
Margevicius suggests that adding memory is about 
the only work worth doing on an older machine. 
Dallas-based Wyndham International Inc. is replac- 
ing about 2,000 PCs and boosting the memory in 
another 1,000 from 128MB to 256MB or 512MB. But 
only systems with at least a 500-MHz Pentium III 
get upgraded rather than replaced, according to 
Mark Hedley, senior vice president and chief tech- 
nology officer. 

“If it’s something as simple as replacing a mouse 
or a keyboard,” it pays to fix the problem without 
worrying what’s inside the box, says Steve Acterman, 
director of corporate IT management at the Orange, 
Calif., office of Volt Information Sciences Inc., a pro- 
fessional services firm. But Acterman plans to re- 
place Volt systems older than Pentium IIIs with 1,200 
to 1,500 PCs from HP by June. 


Don’t Forget Service and Support 

“Don’t get hung up on the name brand,” says Wild- 
ing. “If you look inside the guts of a PC, they’re be- 
coming more and more a commodity item like a 
toaster.” Instead, he says, focus on which contractors 
the vendor uses to support remote offices and the 
quality of the vendor’s service. 

For example, some vendors will automatically re- 
place PCs and even automatically update software 
for a fixed price per seat. But Margevicius warns 
these services work best for companies with strict 
controls over what PCs users can buy. If not, he says, 
“you'll get nickel and dimed” with extra charges to 
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TYPICAL CONFIGURATIONS 


PSG hl ts) PRICE 


2.3- to 3-MHz Pentium 4 processor 
512MB RAM 
40GB-60GB hard drive 


$800-$1,500 


1.6- to 1.7-MHz Pentium M processor 
512MB RAM 
4OMB hard drive 


Note: Configuration ranges for average knowledge workers; 
pricing reflects corporate discounts. 


SOURCE: COMPUTERWORLD INTERVIEWS 
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USB key storage 


kd 


Portable, high capacity, reliable 
Optical media High capacity, low cost 


Flat panels Thinner, less power consumption 


WHAT'S NOT 
3.5-in. floppies 


CRTs 


WHY 
Unreliable, low capacity, security risk 


Use more desk space and energy 
(but still cheaper than flat panels) 


SOURCE: COMPUTERWORLD INTERVIEWS 


support any nonstandard configurations. 

Allen is relying on Affiliated Computer Services 
Inc. in Dallas to perform regular hardware and soft- 
ware updates across offices in all 100 North Carolina 
counties. IT managers should be sure a vendor has 
the processes and qualified subcontractors to handle 
such work over a wide area, he says. 


Remember Education and Training 

With the move toward fewer, more standard configu- 
rations, users need to learn that “they don’t have 
some of the freedoms they had before,” says Allen. 
Rather than buy new systems whenever they find the 
money or download software from the Internet, he 
says, users must accept getting hardware and soft- 
ware upgrades on a departmentwide schedule. 

Users also “have to allow us time to come in and 
replace their systems,” says Allen. “They can’t tell us 
“We’re too busy today; come back in two weeks.’ ” 
And rather than asking a neighbor for help, he says, 
they must call the help desk, which can then gener- 
ate a trouble ticket “so we can track how long it takes 
to get problems resolved.” 

Wilding also suggests that corporate IT discuss 
and agree on procedures with remote offices specify- 
ing when a PC should be replaced rather than up- 
graded. “Set your policies up ahead of time,” he ad- 
vises, “so you're not fighting [over replacements] bit 
by bit.” @ 45099 
Scheier is a freelance writer in Boylston, Mass. He can 
be reached at rscheier@charter.net. 
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Telelogic Upgrades 
UML-based Tools 


Telelogic AB in Malmo, Sweden, 
announced last week that the 
new version of its DOORS/Analyst 
requirements management tool 
will be integrated with the up- 
graded editions of its TAU/Archi- 
tect and TAU/Developer develop- 
ment tools, which are based on 
the Unified Modeling Language 
(UML) 2.0 specification. TAU/ 
Developer 2.3, which already 
supported the C language, will 
add model-driven code genera- 
tion for C++ and Java and provide 
integration with other platforms. 
The new versions are expected to 
be released on April 30. 


Hitachi Launches 
Deskstar ATA Drive 


Hitachi Global Storage Technolo- 
gies Inc. in San Jose last week 
announced its highest-capacity 
3.5-in. ATA hard drive, the 
400GB Deskstar 7K400. The 
new drive has been designed for 
audio/video and Serial ATA near- 
line storage environments. 


SAS Announces 
Service-Level App 


Business intelligence software 
vendor SAS Institute Inc. has an- 
nounced a tool to help companies 
view their IT organizations, run 
analysis on relevant data and en- 
sure that corporate performance 
levels are being maintained. The 
IT Service Level Management ap- 
plication ships next month and 
will start at $30,000. 


Nexaweb Updates 
Dev Platform 


Nexaweb Technologies Inc. in 
Cambridge, Mass., last week an- 
nounced availability of Nexaweb 
Software Platform 3.0 for build- 
ing and deploying rich-client In- 
ternet applications. New features 
include a visual development en- 
vironment, server clustering and 
support for Web services. Server- 
based pricing starts at $30,000. 
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Outsourced Itself 


MERICANS HAVE an unwavering faith 
that technology can solve all of their 
problems, but they tend to forget that it 
also creates new ones in the process. The 
leading edge of technology innovation 
often cuts both ways. Perhaps the best example of this 
is the current election-year brouhaha over the acceler- 
ating trend of outsourcing U.S. jobs in general — and 


IT jobs in particular. IT ad 
vances aren't the sole cause 
of the jobs exodus, but as 
many laid-off programmers 
and call center staffers have 
come to realize, IT innova- 
tions have accelerated that 
trend 

Some effects are subtle. 

For example, voice-over-IP 
telephony systems and the a 
ability to route converged 
voice and data traffic 
through private global net 
works is cutting telephone 
system infrastructure and 
operating costs. Along the way, IT jobs 
are disappearing as voice and data net- 
working functions merge. The technolo- 
gy also makes it easier and less expen- 
sive to route help desk and customer 
support calls to distant call centers in 
places like India, where labor costs may 
be one-fifth of what companies typically 
pay U.S. workers. 

Likewise, the rise of the PC years ago 
helped level the playing field for aspir 
ing programmers everywhere by putting 
unprecedented computing power into 
the hands of people and institutions that 
could never have afforded access to a 
mainframe. And with the emergence of 
the Internet and collaborative tools, lo- 
cal development groups have evolved 
into virtual teams with a global reach. 
Team members can be quickly selected 
and assembled based on expertise and 
lowest labor cost. 

The rapid pace of technical change 
has always discounted technical experi- 
ence, making it easy for the new kid on 
the block to catch up. New hires, fresh 


ROBERT L. MITCHELL is 
Computerworld’ s senior 
features editor. Contact 

him at robert_mitchell@ 

computerworld.com. 


from graduate school and 
steeped in the latest tech 
nologies, have often taken 
the exciting positions while 
veteran programmers were 
shunted into dead-end jobs 
maintaining legacy systems 


and products. Sorry, the new 


guy doesn’t do Cobol. Today, 


the new kids aren't even on 
your block. The plum proj 
ects are moving overseas 
where competent program 
mers can be hired for 
salaries of $10,000 or less. 

Meanwhile, the program- 
ming process itself is becoming more 
efficient and automated, reducing the 
number of programmers needed. Some 
companies have begun embracing tech- 
niques such as extreme programming, 
which advocates say improves both pro 
ductivity and software quality. One com 
pany I recently spoke with claimed to 
have seen a 40% productivity gain on 
some projects, which greatly reduced 
programmer time. 

Until now, many IT professionals have 
rationalized that only less desirable, low- 
level positions were under threat — jobs 
like the one I once had in a PC vendor’s 
tech-support department. Management 
there used commercial spyware to moni- 
tor my computer and telephone activity, 
tracked bathroom breaks and put the 
pressure on to complete as many calls as 
possible by publicly posting daily statis- 
tics on each staff person’s call volumes 
and average call times. Competition was 
intense because those at the bottom of 
the list were routinely fired. No one as 
pires to that kind of job. 


ness processes Jobs wnere Stafter: 
in IT silos — those tha 
ted and comp 
to outsource. Jobs that 
an understandi 
processes anc 
More than eve 
skills matter. The arrogant, 
techie who just 
his cube is an 
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those new skills and posi 

easy it never is. But it’s m 


than the alternative. @ 45286 
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SAS, the leader in business intelligence software, challenges... 


Comply with Sarbanes-Oxley now. 
eR mc eee me 


Qi \ 


ENTERPRISE é With Sarbanes-Oxley compliance deadlines less than a year away, there is an urgency to deliver 
financial and operational transparency — one clean, consolidated and truthful version of data for all 

SUPPLIER 1 . "ACS ‘ : ; ; 
your disclosure controls and procedures. SAS” Corporate Compliance software provides auditable, 
searchable process and document control solutions. So you can prepare now, while creating a system 

ORGANIZATIONAL |: os pea : rine ; Sogn 
that won’t be outdated when the next new legislation is enacted. Our intuitive interfaces are designed 
CUSTOMER »: for users of any skill level — with a central point of control to manage across all environments — and 
an open, adaptable architecture. To find out more about how to confidently comply with Sarbanes-Oxley, 


INTELLIGENCE including Section 404, call us toll free at 1 866 270 5729 or visit our Web site. 


www.sas.com/sox 


The Power to Know. 2 Sas. 


other countries. ® indicates USA registration 
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MANAGEMENT 


CUSTOMER IS A CUSTOMER is a 

customer, right? Actually, it’s 

not that simple. Just ask 

Emerson Process Manage- 

ment, an Emerson Electric 

Co. unit in Austin that sup- 
plies process automation products. 
Four years ago, the company attempted 
to build a data warehouse to store cus- 
tomer information from over 85 coun- 
tries. The effort failed in large part be- 
cause the structure of the warehouse 
couldn’t accommodate the many varia- 
tions on customers’ names. 

For instance, different users in dif- 
ferent parts of the world might identify 
Exxon as Exxon, Mobil, Esso or Exxon- 
Mobil, to name a few variations. The 
warehouse would see them as separate 
customers, and that would lead to in- 
accurate results when business users 


ata 
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Required 


performed queries. 7 

That’s when the compa- 
ny hired Nancy Rybeck as 
data administrator. Rybeck 
now leads a renewed data 
warehouse project that en- 
sures not only the stan- 
dardization of customer 
names but also the quality 
and accuracy of customer 
data, including postal ad- 
dresses, shipping address- 
es and province codes. 

To accomplish this, Em- 
erson has done something unusual: It’s 
building a department with six to 10 
full-time “data stewards” dedicated to 
establishing and maintaining the quali- 
ty of data entered into the operational 

tems that feed the data warehouse. 

The practice of having formal data 
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stewards is uncommon. 
Most companies recognize 
the importance of data 
quality, but many treat it as 
a “find-and-fix” effort, to 
be conducted at the end of 
a project by someone in 
IT. Others casually assign 
the job to the business 
users who deal with the 
data head-on. Still others 
may throw resources at 
improving data only when 
a major problem occurs. 

“Tt’s usually a seesaw effect,” says 
Chris Enger, formerly manager of in- 
formation management at Philip Mor 
ris USA Inc. “When something goes 
wrong, they put someone in charge of 
data quality, and when things get bet- 
ter, they pull those resources away.” 

Creating a data quality team requires 
gathering people with an unusual mix 
of business, technology and diplomatic 
skills. It’s even difficult to agree on a 
job title. In Rybeck’s department, 
they’re called “data analysts,” but titles 
at other companies include “data quali- 
ty control supervisor,” “data coordina- 
tor” or “data quality manager.” 

“When you say you want a data ana- 
lyst, they’l! come back with a DBA 
[database administrator]. But it’s not 
the same at all,” Rybeck says. “It’s not 
the data structure, it’s the content.” 

At Emerson, data analysts in each 
business unit review data and correct 
errors before it’s put into the opera- 
tional systems. They also research cus- 
tomer relationships, locations and cor- 
porate hierarchies; 
workers to fix data in their native lan- 
guages; and serve as the main contact 
with the data administrator and data- 
base architect for new requirements 
and bug fixes. 


ain overseas 


Continued on page 30 
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lor the latest information on safe and effective computing. Warranty Information: For a copy of applicable product warranties, write to: Warranty Information, PO. Box 12195, RTP, NC 


9, At ept. J E BM mak esentatior warranty rding third-party products or services. All offers subject to availability. IBM reserves the right to alter product offerings and specifications at any time, without notice 
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Lincoln Financial's Web 

services system syndicates 
company-specific content and 
applications on its partners’ 
Web sites. 


The U.S. Air Force moves 

to commercial systems to 
help consolidate infrastructure 
and centralize management 


Reliant Pharmaceuticals 

deploys a voice-response 
sales force automation system 
instead of shelling out the cash 
for handhelds for its users 


1 Northrop Grumman 
saves $57 million a year 

by integrating the IT systems of 

acquisition Litton Industries. 


1 After a vendor update falls 
through, Guardian Life In- 

surance forges ahead with its 

annuity-processing system. 


3 DHL’s project to consoli- 

date its eight North Ameri- 
can data centers into one facility 
saves $24 million in a year 


1 J.P. Morgan’s grid com- 

puting project will eventu- 
ally combine the power of 
about 2,000 CPUs, saving mil- 
lions of dollars annually. 


1 Calpine Corp. generates 

millions of dollars in new 
revenue by creating a set of 
real-time interfaces to energy 
markets. 


16 Visa U.S.A.’s cardholder 
dispute-resolution system 
increases customer satisfaction 
while chopping millions in costs. 


9 A call-accounting system 
at Wyndham hotels cuts 

phone costs by storing variable- 

rate tables on a central server. 


9 The Ohio Business 
Gateway lets businesses 
conduct transactions online 
with four state agencies, slash- 
ing the state’s costs by 42%. 


9 Nortel Networks’ inte- 
grated CRM system saves 

the company $15 million and 

reduces its abandoned-call 

rate by 5%. 








These projects by Premier 100 IT Leaders 
resulted in more nimble organizations that 
met business imperatives, saved millions, 
improved customer service or boosted 
bottom-line revenue. Here’s an inside look 
at their trials and triumphs. 
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EDITOR’S NOTE 


Solutions 


ITH SO MANY CHOICES available to us in our every- 
day lives, it’s the simple solution that often goes un- 
explored. Not so with this year’s Best in Class award 
winners, who took some roads less traveled. They 
stopped, stepped back, took in the entire breadth of 
their IT environments and then recast their existing systems. Their 
choices not only created more nimble IT organizations, but also ad- 
dressed business imperatives in creative, efficient w 
Take John M. Gilligan, whose Bi year’s 12 winners, a panel of 
makeover of the U.S. Air Force’s @& | outside judges and Computer- 
IT systems included consolidat- world editors reviewed the 
ing infrastructure, centralizing project candidates, looking in 
management and standardizing $ particular for signs of measur- 
applications. The result: annual i 
savings of about $200 million. ; onces, stra importance to 
Or Steve J. Bandrowczak, whose > the business, substantive cus- 
project at DHL International to ™< tomer impact and new revenue 
consolidate eight data centers opportunities or cost savings. 
into one state-of-the-art facility ELLEN FANNING Many of these IT leaders ap- 
is saving the freight company Peewee § plied the basic idea of simplifi- 
about $24 million a year. a ihseesahatrhie cation to some big projects. But 
Now in its third Comput- ape onoredn with grandness of scale, of 
Now in its third year, Compu PET grandness of scale, of 
erworld’s Premier 100 Best in PCa Tm course, comes friction and risk. 
awards honor such lead- We hope that reading about 
; are a select subset of the 2004 how these 12 award-winners overcame 
Premier 100 honorees who have created those challenges will put you on your 
striking business value through cuttit own path to simplifying and enhancing 
edge technology projects. To choose this your IT environment. @ 44670 
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The Judges 


Special thanks go to 
our panel of judges, themselves 
Premier 100 IT Leader alumni, 
who helped evaluate dozens 
of candidates. They are: 


‘ DENNIS S. 
CALLAHAN 
] Senior vice 
= ay , president and 
4 . ClO, Guardian 
Life Insurance Company of Amer- 
ica, New York (2003 honoree) 


DANIEL W. 
GARROW 
Senior vice 
president of IS 
and ClO, Mohe- 
gan Sun Casino, Uncasville, 
Conn. (2003 pena 
RON 
GLICKMAN 
Senior vice pres- 
ident and CIO, 
DFS Group Ltd., 
San Frenchace (2003 hanna. 


Director of in- 

formation ser- 

vices, Schnitzer 
Group, Portland, Ore. (2003 
honoree) 


egy and archi- 
tecture, Staples inc., Framing- 
ham, Mass. (2002 honoree) 


Senior vice 

president and 

chief technology 
officer, Delta Technology Inc., 
Atlanta (2002 honoree) 
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SYNDICATES CONTENT WITH 


Web Services System 
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| BY MARY BRANDEL 
T’S ONE THING to create 
a business mantra and 
quite another to live by 
it. What’s even rarer is 
for that mantra te in- 
spire the development 
of an IT system that im- 
proves a company’s sales 
distribution and time to 
market, boosts partner rela- 
tionships and customer sat- 
isfaction, reduces Web site 
costs and increases corpo- 
rate recognition. 

But that’s what the IT team 
at Lincoln Financial Group 
in Philadelphia did in Janu- 
ary 2003, when it went live 
with Service Broker, a Web 
services-based system that 
‘ icates Lincoln-specific 
content and applications on 
its partners’ Web sites. 

It wasn’t a project that had 
an easy solution. Lincoln is a 
$4.6 billion provider of life 
insurance, retirement prod- 
ucts and wealth manage- 
ment services. It distributes 

| its offerings through finan- 
| cial advisers, banks and in- 
| dependent brokers. 

When Jason Glazier, chief 
technology and e-commerce 


officer at Lincoln, joined th 
company in 2001, the corpo- 
rate mantra was, “ “We want 


to be the partner of choice,’ ” 


he . “So Lasked, What 
does that mean from an 
e-commerce perspective?” 
One answer was tighter 
integration with broker Web 
sites. In most of the insur- 
ance industry, if consumers 
want to access their ac- 


ee es) 
Financial Group 


www.lfg.com 


@ Business: Lincoin Finan- 
cial Group offers annuities, 
life insurance, mutual funds, 
managed accounts and other 
services. In 2002, its annual 
consolidated revenue was 
$4.6 billion. 


counts or download a form 
from a broker site, they click 
on a link that takes them to 
the insurance provider’s site, 
where they input a separate 
password or user ID. Lincoln 
wanted to go a step further, 
providing content and ac- 
count access within its part- 
ner Web sites, as well as sin- 
gle sign-on for consumers. 

The first problem Glz 
group encountered was 
brand conflict — brokers 
wanted their sites to retain 
their own look and feel. 
Clearly, if Lincoln w anted to 

a “partner of choice,” 
also to hand over the 
branding reins. 

second problem wa 
technical one. Simply outlin- 
ing the Lincoln content in an 
HTML frame wouldn't pro- 
vide the partner’s look and 
feel. A pure Web services 
approach was also out, since 
most of Lincoln’s clients 
couldn’t support that kind of 
system. “It is not a hassl 
free implementation, since 
the partner must then proc- 
ess the XML/SOAP mes- 
sages,” Glazier says. 

For a short time, Lincoln 
maintained subsites for its 
partners that wanted them, 
and those sites linked to re- 
quested content. However, 
maintenance of the subsites 
was burdensome. 

The ultimate answer was 
Service Broker. It took three 
developers four months to 
build the pilot of Service 
Broker, which is a We 

vices-based application with 
a front end that Glazier calls 
a servlet. When the servlet is 
installed on a partner’s serv- 
er, it provides a wrapper that 
can accept Lincoln’s content 
and applications and still 

aintain the partner’s look 
and feel. 

The servlet manages many 
of the functions the partner 
would have to manage in a 


www.computerworld.com 





We knew [customers] may not take us seriously because insurance companies are 
TMS NA Cee CM Lh om 


SON GLAZIER, chief technology and e-commerce officer, Lincoln Financial Group 


Web services application, 
such as authentication, digi- 
tal signatures, passwords and 
page rendering. When the 
partner wants to include Lin- 
coln content or an applica- 
tion, it needs to insert just 
one line of code, Glazier says. 
Because the project repr 
sented such a new idea, one 
challenge was to develop a 
demo so customers could vi- 
sualize the system’s capabili- 
ties. This entailed keeping a 
atch on how much 
money was initially investe 


close w 


www.computerworld.com 


“We knew they may not take 
us seriously because insur- 
ance companies are not usu- 
ally known as innovati 
Glazier says. 

When customers did see 
it, says Rob Pal, Lincoln’s 
vice president of e-business 
and production services, 
about 40% were interested 
in this type of full-scale sy 
dication. Currently, Service 
Broker is fully implemented 
at five client sites. Imple- 
mentation is in progress at 
three others, and five more 


clients are reviewing the 
Service Broker agreement. 
There was some resistance 
on the part of clients that 
didn’t want an outside source 
controlling tec 
their sites, according to Mat- 
thew Josefowicz, manager of 
the insurance group at Ce 
lent Research in New York. 
However, resistance was 
overcome by the applica- 
tion’s power and ease of use. 
According to Glazier, Ser- 
vice Broker was not only 
completed on time and un- 


ology on 


ceeded business objectives. 

For instance, since the de- 
ployment, Lincoln’s growth 
rate with syndicated partners 
has increased manyfold, ac- 
cording to Glazier. In three 
s, clients have granted 
Lincoln premier “shelf space” 
on their Web sites. Time to 
market has also improved; it 

ow takes days to syndicate 
customized content and ap- 
plications, vs. the months it 
previously re d. 

Service Broker has also re- 
duced Web subsite develop- 
ment costs, each of which 
averaged $115,000 in annual 
expenses. And, according to 
Pal, it has improved partner 
relationships. “In one in- 
stance, we were new toa 
customer, and now we’re 
one of their top carrie 
says. “There are a lot of fac- 
tors involved, but syndi 
tion is one of them. 

In addition, Glazier says, 
there has been a significant 
increase in the sale of Lin- 
coln’s products and services 
through the brokers using 
the technology. “There is no 
doubt in our management’s 

ind that our syndicate 
technology relationship is 
partly responsible for thi 
he says. 

According to Josefowicz, 
Lincoln is the only insurer 
that doesn’t require con- 
sumers to leave a partner’s 
Web site to access its infor- 
mation. “Lincoln’s initiative 
makes it easier for partner 
distributors to do business 
with them, which Celent re- 
search has shown to be a crit- 
ical factor in driving carrier 
choice among independent 
agents,” he says. @ 44445 


Casi 


Brandel is a freelance 
writer in Grand Rapids, 
Mich. Contact her at ma 
brandel@comcast.net. 
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US. Air kKorce 


GOES COMMERCIAL WITH 


Network Consolidation Effort 


BY PATRICK THIBODEAU 
CIO JOHN M. GILLIGAN is 
leading a makeover of the 
U ir Force’s IT systems 
that involves consolidating 
infrastructure, centralizing 
management, standardizing 
applications and building a 
foundation for Web services. 
It’s a vast project, affecting 
some 500,000 personnel stz 
tioned across 110 military 
stallations. 

It’s also a network-centric 
project, which will give the 
Air Force the means of “lev- 





eraging information across 
the spectrum of our war- 
fighting operations to give us 
significant combat advan- 


tage,” says Gilligan, who 
oversees the agency’s multi- 
billion-dollar IT operations. 
When this project began in 
2001, the Air Force’s IT land- 
lized, 
fragmented and expensive to 
maintain. While the agency 
had strong IT operations 
lacked consistent technical 
standards and operating pro- 
cedures. Without uniformity, 
IT managers couldn't be as- 
sured, for instance, that a 
new enterprisewide applica- 
tion would work everywhere. 


scape was decentr. 


To correct these problems, 


cut IT costs and improve 
services, the Air Force began 
consolidating servers and 


GETS FAST Sas BAW. wage 
Interactive Voice - 
Nex O08 ene) ici(ee i] 


BY BOB BREWIN 
RONALD J. CALDER(¢ clo 
at Reliant Pharmaceuticals 
LLC, discovered that when 
it comes to building a sales 
force automation s} 
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the human voice makes for 
a very good interface — at a 
very good price. 

Reliant, a privately held 
company in Liberty Corner, 
N,J., that sells hypertension 


UR Me Tig gece 


Pe ALL 


® Organization: includes 110 
bases, 500,000 personnel and 
10 ClOs at major commands 


® Project champion: 
John M. Gilligan 


servers have been cut from 
1,400 to fewer than 300. Re- 
mote management of desktops 
has reduced costs by 50%. 
Some 2,000 Air Force person- 
nel have been freed up to 
move to other jobs. 


blockers and cardiac 

drugs, needed timely data 
from its salespeople, who 
call on physicians who pre- 
scribe such medications. But 
Calderone quickly 
determined that it 
would cost $4 mil- 
lion to $6 million to 
equip Reliant’s sales 
force, which is pro- 
jected to grow to 
900, with handheld 
comput nd link 
them into a sales 
force automation 
system like those 
used by major drug compa- 
nies. He simply didn’t have 
that money in his budget. 

That’s when Calderone 
decided to tap an asset the 


Ronald J. Calderone, 
Ci0, Reliant Pharma- 
ceuticals LLC 


networks and setting uni- 
form policy and technical 
standards. It also began 
moving to commercial sys- 
tems, which were already in 
wide use on many bases, 
such as Microsoft Corp.’s 
Active Directory and Sys- 
tems Management Server, as 
well as Hewlett-Packard 
Co.’s OpenView for systems 
and network management. 
“We really didn’t have 
much of an optior 5 
Gilligan. “To do what we 
wanted to do, we had to r 
on commercial technology 
it works, and it’s pretty good.” 
In adopting commercial 
technology, the Air Force is 


salespeople already 
their voices — and couple 
that with an interactive 
voice-response (IVR) sys- 
tem called Victor, which 
stands for Voice In- 
teractive Tracking 
& Operations Re- 
pository. The sys- 
tem provides the 
company with de- 
tailed and timely 
data on sales calls 
accessible from a 
SQL database. 
While Calderone 
declines to provide 
specific financial details, he 
Reliant developed Vic- 
tor using a combination of 
commercial speech-recogni- 
tion technologies for “a cou- 
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[We're] leveraging information across the spectrum of our war- 
fighting operations to give us significant combat advantage. 


- JOHN M. GILLIGAN 


ple of hundred thousand 
dollars.” He says the system, 
which the company started 
building in early 2002 and 
rolled out to its entire sales 
force about a year later, “had 
a payback of much less than 
a year.” 

Dan Miller, an analyst 
at Zelos Group Inc. in San 
Francisco, says [VR systems 
offer a low-cost alternative 
to mobile hardware and 
sales force automation 
software. 

“{IVR] systems are not 
expensive, and they’re not 
rocket science,” Miller say 

“The true payback is time- 
lin ‘ Calderone, who 
notes that before Victor, the 
Reliant sales force used pa- 


www.computerworld.com 


per forms for call reports. 
That information took eight 
weeks to trickle in from an 
outside data entry contrac- 
tor. Now, Reliant gets the 
results of those sales calls 
overnight, he says. 

Using voice prompts, Vic- 
tor guides sales personnel 
through a series of questions 
analogous to data fields, 
such as doctors called, loca- 
tion, practice and other 
formation. Responses are 
stored in a SQL database. 
Victor is so easy to use, 
Calderone says, that user 
training takes about an hour. 

Robin McWilliams, Re- 
liant’s manager for telecom- 
munications, says it wasn’t 
any more difficult to inte- 


BEST IN CLASS 


foliowing a practice that has 
been gaining steam since the 
Clinton administration. Fed- 
eral agencies have been re- 
placing legacy systems with 
commercial ones with the 
goal of improv interoper- 
ability and integration and 
reducing costs. 

The Air Force’s push is 
part of a broad 
partment of Defense goal for 
network-centric s 
livery. But the Air Force has 
been “a > bit of a leader” 
in bringing together com- 
mercial off-the-shelf soft- 
ware with existing systems 
to satisfy those objectives, 
says Ray Bjorklund, an ana- 
lyst at Federal Sources Inc. 
in McLean, Va. The Air 
Force work is influencing 
similar efforts at the Navy 
and DOD, he says. 

But the Air Force is hold- 
ing onto one proprietary 
technology: its security sys- 
tems. “The code is not avail- 
able commercially, and we 
believe that gives us some 
additional level of con 
dence,” says Gilligan. 


Pharmaceuticals LLC 


tem was installed at a traction 
of the cost of handheld com- 


A major challenge was 
overcoming cultural resis- 
tance from IT organizations 
that were used to some de- 
gree of independence. 

First, Gilligan got feedback 
from top Air Force officials. 
He then developed measure- 
ment metrics and helped 
foster competition among 
various commanders in 
meeting project objectives. 
With 10 CIOs at major com- 
mands reporting to Gilligan, 
the competition is such “that 
one organization wants to be 
out front, so they actually 
accelerate,” he says. 

The Air Force has nearly 
completed its network and 
server consolidation and es- 
timates that new abilities 
such as remote desktop 
management are helping it 
save $200 million per year. 

“Our objectives are the 
same: to give our war fighters 
a consistent, easily accessible 
set of capabilities anywhere 
in the world,” says Gilligan. 
“And we also hope to get the 
benefit of some cost efficien- 


cies.” @ 44362 


grate data from Victor into 
the company’s systems than 
it would be to integrate any 
other type of data. Thanks to 
Victor, “voice is just another 
form of data,” he says. 
Though Reliant built Vic- 
tor with existing IVR soft- 
ware and hardware, including 
Dialogic voice-processing 
boards from Intel Corp. and 
speech software from Nuance 
Communications Inc. and 
the Sony Pictures division of 
Sony Corp., Calderone says 
the company has 32 patents 
pending on Victor. He adds 
that Reliant is now looking 
for a marketing partner to 
sell the system — which 
could further add to this 
project’s payback. @ 44371 
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The power to control pretty much everything. 


A constantly changing business needs IT that changes 
with it. HP OpenView management software, used by every 
Fortune 100 company, lets you see, control and automate 
a mixed IT environment from any location. The result? 
Your IT stays in sync with the demands of your business, 
and suddenly change doesn’t seem like such a scary thing. 
www.hp.com/info/openview 
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LEARNS AND GROWS 


OM lelrecuriteep ure iee 


BY MARY BRANDEL 
OU KNOW you’ve 
done something 
right when you 
can apply the 
wisdom gained 
from one project 
to save time and mor 
the next. That’s the e 
ence Thomas W. Shelman’s 
team at Northrop Grumman 
Corp. had when it completed 
the huge IT integration proj- 
ect ne itated by the ac- 
quisition of $5.1 billion Lit- 
ton Industries Inc. in 2001. 

Considering Northrop 
Grumman’s growth-through- 
acquisition strategy, that was 
a pretty important outcome. 
Since Litton, Northrop has 
acquired $2.6 billion New- 
port News Shipbuilding and 
$10.7 billic 
to Shelman, it has integrate 
those IT systems in half the 
time it took to do the Litton 
integration. 

“We made sure we cap- 
tured processes of integration 
so we could repeat them for 
future acquisitions,” says 
Shelman, CIO at Northrop. 
“It is essential for the com- 
pany to look and act like one 
company, have efficient and 
secure access to computing 


resources from anywhere, one | 


standard network protocol, 
calendar and desktop image 
and one way to collaborate.” 
During the Litton acquisi- 
tion, Shelman had more than 


Hy Lb 


ce 


AeRst 


that hanging over his head. 
Shareholders were promised 


a high level of savings, partic- | 


ularly from IT. But his group 
did better than expected, de- 
liver 58 million in annual 
IT savings, expected to grow 
to more than $600 million 
cumulatively over the next 10 
years. 

But even though the $12 
million project came in on 
time and $4 million under 
budget, it wasn’t all smooth 
sailing. For one thing, Litton 
was a big pill to swallow. 
The company had 26 sepa 
rate IT entities supporting 
four businesses and 15,000 
users at 64 sites. 


Northro 
Cum melee 


Fee AAU LT Ry 


that offer products and ser 
vices in systems integration, 
defense electronics, IT, ad- 


to grow to more than $600 
million over the next 10 years. 


Shelman’s team had to in- 
tegrate those separate groups 
into one centrally managed 
shared service, migrate Lit- 
ton’s Active Directory infra- 
structure to its own corpo- 
rate IT resource and move 
eight e-mail environments to 
a corporatewide Exchange 

ystem. The group also con- 
solidated Litton’s 31 separate 
Internet points into three 
and two Litton data centers 
into the primary Northrop 
data center. 

The biggest savings came 
from centralizing corporate 
buying. At Litton, each busi- 
ness unit purchased IT 
equipment without taking 
advantage of corporate pur- 
chasing agreements. Shel- 
man’s group negotiated new 
sourcing contracts based 
on pri ed volume and 
Northrop’s accepted hard- 
ware and software stan- 
dards. not only helped 
leverage Northrop’s buyi 
power but also cemente 
which products the tect 
cal staffs would support. 

Shelman says the entire 
organization now uses stan 
dard networks, office prod- 
ucts, network security and 
routers, as well as the IBM 
WebSphere application inte- 
gration layer. In addition, it 
manages suppliers, including 
SAP as a predominant sup- 
plier, with a corporate-level 
buying agreement. 

We told people, ‘Here are 
the things you get a choice 
on, and here’s what you use 
that’s standard,’ ” Shelman 
says. He acknowledges that 
he met with a tremendous 
amount of resistance. “It’s 
not easy telling someone to 
rip out their homegrown 
ERP system that they’ve used 

ecades, but you have to 
empathize and show people 
why you're doing it,” he s 

Today, the cost of IT < 

percentage of sales is 2.5%. 
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It is essential for the company to look and act like one company, have efficient and secure access to computing resources from any- 
where, one standard network protocol, calendar and desktop image and one way to collaborate. 
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That’s down from 3% in 
2000, before the Litton ac- 
quisition. 
nd savings aren’t the only 

outcome. “The acquisition of 
a company like Litton brings 
more than just projects and 
revenue but relationships 
and trust that will continue 
to result in an increasing 
share of federal IT con- 
tracts,” says Winn Hardin, 
an analyst in the aerospace 
and defense practice at Frost 
& Sullivan. “Northrop’s ex 
perience in integrating large 
acquisitions has served it 
well in this case.” 

There are many lessons 


www.computerworld.com 


that Shelman’s group will 
apply to future acquisitions. 
One is application scaling. 
While products such as Ex- 


change readily scale from 


40,000 to 120,000 users, “the 
way we govern the infra- 
structure had to change sev- 
eral times based on the mag- 
nitude of the situation, and 
that was not always a linear 
Shelman 
Win over the 

ers. “We found that peo- 
ple always align with the 
management directly above 
them,” Shelman says. He 
actually hired a consultant 
to help with what he thought 


was an employee-engage- 
ment issue. “But once we 
shored up management, the 
problem went < he says. 
Third, Shelman says, you 
can’t communicate too 
much. “Just because you say 
something, doesn’t mean 
they processed it and can ar- 
ticulate what you said.” What 
might seem like resistance 
could simply be a lack of true 
understanding, he says. 


@ 44446 


Brandel is a freelance writer 
in Grand Rapids, Mich. 
Contact her at mary. 
brandel@comcast.net. 
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BY TODD R. WEISS 
HEN the IT de- 
partment at 
Guardian Life 
Insurance Co. 
decided to in- 
stall a new life insurance and 
annuity administration ap- 
plication in 1999, the project 
seemed to have all the ingre- 
nts for success. 

The plan was to replace a 
30-year-old legacy batch s} 
tem with a new online s 
tem that would allow us 
to create, view and modify 








database tables in a real-time | 


environment. The applica- 
tion, Transcend, had just 
been sold by its former v 
dor, TriMark Technologies 
Inc., to Pleasanton, Calif.- 
based PeopleSoft Inc., and a 
pleasing new product road 
map had been laid out that 
would help Guardian add 
much-needed capabilities. 

With PeopleSoft’s bold 
commitment to an improved 
Transcend, Guardian decid- 
ed to move ahead. It de- 
ployed the existing applica- 
tion temporarily, modifying 
it to work with its IT sys 
tems until it was time to 
move to the revamped Peo- 
pleSoft rele Shelley 
McIntyre, a second vice pres- 
ident of business services at 
the New York-based mutual 
life insurance company. 

But then things came un- 
raveled. PeopleSoft decided 
to drop its plans for an up- 


ee 
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Guardian Life 
Insurance Co. 


Pe AS mL) 


@ Business: The fourth-largest 
mutual life insurance company 
in the U.S., Guardian has more 
than 5,500 employees and 
more than 2,800 financial rep- 
resentatives in 94 agencies. It 
supplies employee benefits pro- 


can be launched in 90 days, 
and back-office costs were 
reduced by 40%. 


nd Guardian was left 


with a shaky IT strategy. The 


options were clear: Either 
stick with Transcend, which 
Guardian’s IT department 
was already updating, or start 
over with a new product. 

“That’s when we realized 
this wasn’t a temporary solu- 
tion anymore, but the one 
that we wanted and the one 
we wanted to go forward 
with,” McIntyre says. 

By that time, even another 
application from a new ven- 
dor would have require 
customization work. So it 
made more sense to stick 
with what they had, McIn- 
tyre says. “It was probably 
the biggest challenge the 





@ll 
GOES IT ALONE WITH 


Insurance Processing System 


“People thought it wasn’t possible. 
But the team did it,” says Guardian 
Life’s Shelley McIntyre. 


team had ever been gi 
she says. 

In just 19 weeks, the 40- 
member team had to imple- 
ment the system, create the 
software interfaces to make it 
all work and get the new ap- 
plication ready for the com- 
pany’s employees. The hard- 
ware and software costs to- 
taled about $2.2 million, not 
including staff time, McIn- 
tyre s “Other people in 
the compa 
the No-Way Team,” 
“People thought it wasn’t 
possible. But the team did it.” 

By going it alone witha 
product that no longer had 
vendor support, Guardian’s 
IT staff had to build its own 


she says 


| 
| 
| 


| 


experti strategy that 
had mixed potential. “You’ve 
got control over your own 
destiny for sure,” McIntyre 

y don’t think anyone 
outside the company thought 
we could do it. But the busi- 
ness team and the IT team 
thought we had to do it.” 

Guardian installed the first 
version of the system in 1999, 
Since then, the IT team has 
phased in new features and 
capabilities, including the 
ability to conduct Web trans- 
actions. Tc about 57 bro- 
kerage firms use the updated 
application to sell their fi- 
nancial produc t’s one 
standard interface that all 
the outside broker dealers 
can u McIntyre says 

One huge benefit is t 
the new applic 
Guardian to launch financial 
services products in 90 days, 
rather than the six to nine 
months it took with the origi- 
nal software, she says. “We 
made a huge impact on the 
business, that’s for sure,” 
McIntyre says. The move has 
also 


ion allows 


costs. “It was hugely suc« 


ful,” she says. @ 44357 
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SAVINGS IN 


Bziek@orton 
Consolidation 
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www.dhi.com 


@ Business: An express and 


pected to reach more than 
$50 million later this year. 


BY LINDA ROSENCRANCE 
HEN Steve J. 
Bandrowczak 
and Darrel 
Waite joined 
DHL Interna- 

tional Ltd. in March 2002, 

the two men embarked on a 

mission to consolidate the 

freight company’s eight data 
centers sprinkled through- 
out North America into one 
state-of-the-art facility in 

Scottsdale, Ariz. 

“DHL wan 
seamless single offering to 
ustomers, like a single 
invoice or a single Web in- 


ito create a 


terface,” says Bandrowczak, 
DHL's CIO. “In order to en- 
able that global logistics 
business vision, we had to 
consolidate our IT infra- 
structure, which included 
the data center, our network 
backbone and our key global 
applications.” 

The project, also helmed 
by Waite, who is vice presi- 
dent of operations, was de- 
signed to do just that. The 
goal was to bring together 
into one facility DHL’s glob- 
al and regional IT functions 
within North America, in- 
cluding people, computers 
and bus 

And they did it, on time 
and under budget. The total 
cost of DHL’s Americas In- 
formation Service consolida- 


ss systems. 


aT ELA ERS 


tion program, completed in 
December 2002, was 86 
million. The project’s budget 
was $76.15 million. 

The consolidation is cur- 
rently saving DHL about 
$24 million a year, and when 
the company consolidates 
the IT infrastructure of its 
latest acquisition, Airborne 
Express, into the 


cottsdale 


facility in the second quarter 


of this year, the savings will 
be more than $50 million an- 
nually, Bandrowcezak J 
The information services 
center in Scottsdale com- 
pletes a loop of centers cir- 
cling the globe that provide 
lock manage- 
ment of the company’s IT 


o centers are 


in London and Kuala Lumpur, 


Malaysia. Each center man- 
ages DHL’s computing and 


telecommunications network, 


DHLNet, for a nine-hour 
shift — eight hours 
of support plus a 
one-hour overlap to 
transfer control 
from one cer 
the next. The cen- 
ters provide support 
to DHL’s 60,000 em- 
ployees and more y | 
than | million cus- 
tomers worldwide 
Part of the project 
included migrating or con 
solidating 103 Unix, Wintel 
and AS/400 servers and 
I8TB of storage from the 
Redwood Shores, Calif., data 
center to the Scottsdale fa- 
cility; migrating Sun Solaris 
systems to Scottsdale from 
mpe, ., and in most 
cases, converting them to 
DHL’s global open-systems 
standard HP-UX li; and 
moving the mainframe, tape 
and print operations units 
from Houston to Scottsdale. 
“We were predominantly 
open systems, but we had a 
large mainframe environ- 


ment in Houston we had to 
Waite says. “And we 
had to integrate the main- 
frame skills into our techni- 
cal skilis. Now the main- 
frame has become an equal 
part of the new Scottsdale 
facility and the new global 
environment for DHL.” 

Another challenge was 
how to capture and transfer 
some longtime employees’ 
knowledge about the compa- 
ny’s core applications, par- 
ticularly when those em- 
ployees had decided not to 
move to Scottsdale. One way 
was to use a “shadow ap- 
proach,” Waite says. 

“We brought on new em- 
ployees, and they shadowe 
the legacy employee. They 
got up to speed, and there 
was knowledge transfer,” 
Bandrowczak says. 

The move to Scottsdale 
benefits both DHL and its 
customers, Satish Jindel, 

st at SJ Con- 
sulting Group Inc. 
in Sewickley, Pa. 
“By bringing all the 
IT needs of DHL to- 
gether, the company 
has a better under- 
standing of what 
customers are do- 


move,” 


Steve J. Bandrow- _ing, and it will have 
czak, CIO at DHL 
international Ltd. 


positive implica- 
tions from a cost 
point of view and from a cus- 
tomer perspecti Jindel 
“In the long run, e 
one will come out ahe 
Donald Broughton, a 
transportation analyst at 
A.G. Edwards & Sons Ine. in 
impressed with 
DHL’s ability to get the proj- 
ect done fast and inexpen- 
t they accom- 
on time and un- 
der budget is heroic given 
the operational comple 
of the business that this in- 
formation system has been 
charged with managing,” 
Broughton says. @ 44443 
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BY MATT HAMBLEN 
ONSIDERED one 
of the largest 
grid computing 
projects in the 
world, J.P. Mor- 
gan Chase In- 

vestment Bank’s pioneering 

effort to combine seven sep- 
arate financial risk manage- 
ment systems to share com- 
puting power is on target to 
lower costs while increasing 
flexibility and service to in- 
ternal customers. 
The idea was hatched back 
)1 to address cost 

ing inefficiencies in the 
seven systems, which were 
designed to help traders as- 
sess and manage financial 
exposures such as interest 
rates, equities, foreign ex- 
change and credit derivatives. 

nown as the Compute 

BackBone, or CBB, the new 

system will eventually com- 

bine the power of about 

2,000 CPUs that run on 50 

midsize servers. Early this 

year, more than 700 CPUs 
were on the Compute Back- 


Bone in stripped-down blade 


servers, and 150 CPUs are 
being added each month. 
According to CIO Michael 
J. Ashworth, the New York- 
sed investment bank spent 
5 million upfront on the 
project, working with Plat- 
form Computing Inc. in 


Grid Computing 


14 COMPUTERWORLD March 15, 2004 


BEST IN CLASS 


Am a eet tre 
Investment Bank 


www.jpmorgan.com 


@ Business: Provides invest- 
ment banking and commercial 
banking products and ser- 
vices. Also advises on cerpo- 
rate strategy and structure, the 
raising of capital in equity and 
debt markets, and risk man- 
agement. 


costs and more effective sys- 
tems management resulted in 
$1 million savings in 2003. An- 
other $5 million in savings are 
expected this year. 


Markham, Ontario, to devel- 
op middleware that shares 
caching resources and pro- 
vides management, queuing 
and scheduling. 

“We are looking for infi 
nite capacity in our compute 
[system], and th bit of a 
challenge. But this gives us 
more progress toward that 
goal. It’s something which is 
difficult to put a price on,” 
Ashworth says. 

Still, initial accounting 


shows that the Compute 
BackBone saved the bank 

$1 million in 2003, and an- 
other $5 million in savings 
are expected this year. The 
savings come from lower 
costs for hardware, reduced 
development and opera- 
tional costs, and more effec- 
tive systems management, 
says Adrian Kunzle, co-head 
of architecture for invest- 
ment bank technology. 

The Compute BackBone is 
built on new blade hardware 
devices, which are “heavily 
cut-down machines with four 
processors and a bunch of 
memory,” Kunzle says. Tak- 
ing into account all areas of 
savings, the CBB has “taken 
easily 20% out of the com- 
pute-cycle costs,” he adds. 

Steven Neiman, senior in- 
formation architect and one 
of the Compute BackBone’s 
creators, says the grid ap- 
proach allows the invest- 
ment bank to reduce opera- 
tional risk, for instance when 
an isolated server fails. “You 
have an ability to respond 
much more flexibly,” he says. 

In another show of flexibil- 
ity, a new credit-trading ap- 
plication was built into the 
system in just 10 weeks in- 
stead of the five months it 
would have taken before the 
Compute BackBone, Ash- 
worth s And because the 
CBB provide calable in- 
frastructure, the investment 
bank was immediately able to 
handle new business volume. 

According to Ahmar Ab- 
bas, an analyst at Grid Tech- 
nology Partners in South 
Hadley, Mass., J.P. Morgan’s 
Compute BackBone is prob- 
ably the biggest grid com- 
puting project in the world, 
compared with the six oth- 
ers that have been publi- 
cized and are currently un- 
der way. Such projects can 
lower costs partly bec 
they use inexpensive servers 
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that can be added one at a 
time, he says. 

“The money you can save 
Abbas says. 
But perhaps more than the | 


is huge, 


technology itself, J.P. Mor- 
gan’s IT managers’ enlight- 
ened thinking in creating the 
Compute BackBone has 
earned Abbas’ praise 

“It’s a very impressive 
project because of the huge 
mind-shift away from what 
they were doing before,” he 

fou are pooling all 

kinds of IT resources from 
all areas of the company, and 


www.computerworld.com 


that’s one huge leap.” 

Making the organizational 
shift meant overcoming skep- 
ticism from internal users 
who had run applications on 
their own dedicated servers, 
Ashworth says. “This was a 
proposed factory for high- 
end computing, and you 
were taking away the per- 
ceived flexibility that the 
business units think they 
have,” he explains. “It wz 
lot of people to convince 

Neiman credits the cre- 
ation of the CBB to bright 
minds at the investment 


S 


oveS 
bank with roots in the acade- 
mic world who were encour- 
aged to “defend their ideas 
in open forums.” This meant 
that “anybody anywhere in 
the bank could come up and 
say, ‘I don’t think you’ve 
thought this through.’ 
a self-corre¢ 
nism,” he says 

The team of innovators 

“wasn’t sitting here saying, 
“We want to build grid com- 
puting iman adds. In- 
stead, he says, “we wanted to 
solve the problem we were 


handed.” @ 44461 


We are looking for 
infinite capacity in our 
compute [system], 
and that’s a bit of 
a challenge. But this gives us 
more progress toward that goal. 
It’s something which is difficult 
to put a price on. 


~ MICHAEL J. ASHWORTH, 


k 
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BY THOMAS HOFFMAN 
IN LATE 2001, San Jose-based 
energy producer Calpine 
Corp. saw an opportunity to 
create a set of real-time in- 
terfaces to several energy 
markets, with the twin goals 
of improving operational ef- 
ficiency and gaining a com- 
petitive antage. 

The company’s $136,000 
IT investment has helped 
generate or protect millions 
of dollars in revenue, prov- 
ing that Calpine succeeded 
on both counts. 

The first interface, 
launched in January 2002, 
was applied to load teleme- 


BY LUCAS MEARIAN 
WHEN AN INACCURATE charge 
is listed on a credit card bill, 
it’s not just the customer who 
sees red. Settling a disputed 
charge is one of the costliest 
‘redit card 


components of a 
company’s business. 
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GENERATES 


RESOLVES CHARGE 
DISPUTES WITH 


Web-based System 


Calpine 


REVENUE WITH 


Real-Time Market Interface 


Calpine Corp. 


www.calpine.com 


@ Business: This energy pro- 
ducer has 88 facilities with a 
total capacity of about 22,000 
megawatts, Another 10 facili- 
ties under construction will add 
000 megawatts to the total. 


@ Project champion: 


payback: 
A $136,000 IT investment has 
generated millions of dollars in 
new and retained revenue. 


At Visa U.S.A. Inc. in Fos- 
2 if., a new back- 

office infrastructure will re- 
duce the time and labor re- 
quired to handle a customer- 
disputed charge by creating 
an online, automated proc- 
ess. The company expects 


He BLESS 


try for Calpine’s industrial 
customers in Texas. Previ- 
ously, gathering this data was 
cost-prohibitive. Leased-line 
modems and other equip- 
ment could run as high as 
$12,000 per customer site 
and take 60 to 90 days to de- 
Barbara Kind 
Calpine’s director of opera- 
tions engineering services. 
So the energy firm devel- 
oped an approach that allows 
it to view customer load data | 
and dynamically schedule 
those loads though a Cellular 
Digital Packet Data backbone 
with the Electric Reliability 
Council of Texas Inc., the 


that the system will help it 
save as much as $1 billion 
over the next five years. 
“We’ve implemented the 
first two releases of the Re- 
solve Online infrastructure, | 
and already we’ve achieved 
savings in excess of 
$200 million sys- 
temwide,” si 
Scott Thompson, 
Visa’s CIO and 
project leader. 
The Visa Resolve 
Online project, now 
in its final stage, is a 


Web-enabled appli- Scott Thompson, ClO 
at Visa U.S.A. 


cation used to facil- 
itate changes to the re-engi- 
neered disputes process. 

The greatest benefit of the 
project has been to simplify | 
the current process by elimi- | 


agency that manages a major 
portion of the state’s electric 
power grid. In some in- 
stances, Calpine uses spread- 
spectrum radio technology to 
“hop” to a local data site 
Darrell Scruggs, Calpine’: 
manager of market opera- 
tions and engineering. 

Calpine was able to reduce 
its implementation costs per 
interface to $2,500 and slash 
deployment time to one or 

Kindel. 
he top-line impact was 

even more impressive. The 
real-time interfaces helped 
Calpine capture several mil- 
lion dollars in new 2002 rev- 
enue from industrial cus- 
tomers in“ and freed up 
electricity that could be sold 
to other Dennis Fish- 
back, Calpine’s CIO. 

According to Zarko Sumic, 
an analyst at Meta Group Inc. 
in Stamford, Conn., Calpine’s 
efforts reflect an increased 
need in the U.S. energy in- 
dustry for wholesale market 
tra The ability to 


nge 


nating most paper documen- 
tation, reducing the time re- 
quired to resolve disputes 
and eliminating unnecessary 
steps in the process, Thomp- 
son says. 

This Web-based tool gives 
member banks, mer- 
chants and cus- 
tomer support rep- 
resentatives at mem- 
ber banks real-time 
access to transaction 
data through secure 
browser screens or 
Visa’s private IP 
network, known as 
Direct Exchan 

“Tt evolves our back-office 
infrastructure into a real- 
time, cardholder-centric sj 
tem,” Thompson says. 
Avivah Litan, an analyst at 
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Dennis Fishback, 
Calpine’s ClO 


among market participants, 
such as Calpine, and market 
operators can help partici- 
pants reduce scheduling and 
planning time from days or 
hours to minutes, 
It also allows the compa- 
nies to optimize dispatches 


says Sum- 


Gartner Inc. in Stamford, 
Conn. handling con- 
sumer chargebacks can cost 
merchants as much as $50 
each. Card-issuing banks ar 
acquiring banks (the banks 
that back merchants) lose as 
much as $25 each. Litan 
an online dispute resolution 
system is “one of the most 
ving, productive fea- 
s” that a credit card 
company can implement. 
“With a chargeback, [cred- 
it card companies] have to 
produce documentation, get 
back to the acquiring banks, 
and the acquirer has to get 
back to the merchant,” Litan 
“Now [Visa] just puts 
thing in the system and 


| ly on pape 


to increase the payback on 
energy generation, he adds. 
The project presented 
Calpine with relatively mi- 
nor challenges. For the load 
telemetry interfz 
the biggest challenge was 
not knowing until Jan. 1, 


e effort, 


Visa U.S.A. Inc. 


www.visa.com 


time and labor required to han- 
dle disputed charges, saving 
Visa an anticipated $1 billion 
over the next five years. 


olution process relied heavi- 
and the postal 
ate with 


2002, just how many cus- 
tomer sites would need in- 
terfaces, says Kindel. 

Meanwhile, big electric 
customers in Texas were re- 
cently given the opportunity 
to elect to be paid to ha 


their electricity service 


formed a working group with 
card is 
chants to re-engineer the ex- 
ception rules, processes and 
systems. TI 


uers and some mer- 


Visa Resolve 
Online project began in No- 
vember 2001, and the first ver- 
sion went online in Jun 
Subsequent releases ¢ 
Resolve included the ability to 
create and transmit c 
backs, attach images and sup- 
porting documentation and 
transmit large volumes of 
images relevant to disputes. 
The fourth release of the 
online product is expected 
in October and will provide 
F request 
service, fraud reporting and 
a set of revised dispute rules. 
The Visa Resolve project has 
reduced customer service 


access to V 


terrupted under certain con- 
ditions, under what’s known 
as the Loads Acting as a Re- 
source (LAAR) program. Be- 
ginning last May, Calpine 
created a set of real-time 
interfaces to provide these 
services to large customers 
through their local retail 
electricity providers. 

Calpine was able to deliv- 
er these services by leverag- 
ing its existing energy man- 
agement system, wireless 
communications and field 

ta acquisition de 
interfacing to the revenue 
meters and the load’s Distri- 
bution Control System. 

The payoff? Implementa- 
tion of the LAAR service for 
just one customer generated 
a 37-fold return on invest- 
ment in revenue retenti 
ack. 

yu don’t have to spend 
hundreds of thousands of dol- 
lars to create a competitive 
advantage,” says Kindel. “You 
can do it by thinking creative- 
ly and implementing innova- 


@ 44358 


ces and 


alone, says Fi 


tive solutions. 


training time, standardized 
information exchanged be- 
tween Visa and its bank and 
merchant customers, im- 
proved quality control with 
regard to internal processes 
and cut the time it takes to 
resolve disputes. 

What V dn’t figure 
into the projected payback 
was increased customer sat- 
isfaction, which Thompson 
says was cited by member 
banks as the biggest benefit. 

“It has been projected that 
upon full implementation of 
Visa Resolve Online in Octo- 
ber 2004, disputes will be at 
least 20% less expensive to 
process,” Thompson s 
“Some members believe this 
number to be closer to 50%.” 


@ 44631 
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Wyndharr 


e CHECKS OUT BENEFITS OF 


Centralized Call-Accounting 


BY GARY H. ANTHES 

T’S AN UNPLEASANT but 

ence: You are chec 

out of a hotel and are 

outraged to find your 

bill littered with long- 
distance telephone charges, 
at $10 to $20 a pop. And there 
are about a dozen $1 charges 
for local calls — one for 
every time you connected 
to the Internet. You stay at 
hotels in this chain often, 
you tell the desk clerk, and 
they ought to treat you bet- 
ter. He agrees to remove the 
charges, but he makes you 
wait while he fixes your bill. 

Thanks to some innova- 

tive work by project leader 
Mark F. Hedley, that scenario 
doesn’t play out anymore at 


POLE UL 
International Inc. 


www.wyndham.com 


@ Business: Based in Dallas, 
Wyndham International owns, 
leases, manages and franchis- 
es hotels and resorts in the 
U.S., Canada, Mexico, the 
Caribbean and Europe. 


nated more than 100 local sys- 
tems and is expected to pro- 
duce a 269% return on invest- 
ment over five years. 


He) AbD 


ham hotels. Hedley, a 
senior vice president and 
chief technology officer at 
Wyndham International Inc. 
in Dallas, is the mastermind 
behind a chainwide, central- 
ized call-accounting system 
that has reduced operating 
costs at the company’s hotels 
while removing a key source 
of customer dissatisfaction. 

On a central server in Dal- 
las that interfaces to each ho- 
tel, the new system keeps 
track of telephone rates that 
can vary by hotel, corporate 
customer, guest group, date 
or even by individual guest. 
A Wyndham salesperson 
can, for example, promise a 
convention group a block of 
rooms with a special low 
phone rate for the duration 
of their stay and be confi- 
dent that the group will get 
that rate — automatically 
and transparently. 

The system also recog- 
nizes Wyndham’s ByRequest 
premier members and en- 
sures that they get free long- 
distance and local telephone 
service and free high-speed 
Internet access. It also sup- 
ports administrative func- 
tions such as call-pattern 
analysis and compliance with 
national carrier contracts. 

The call-accounting system 
eliminated more than 100 lo- 
cal systems and is expected 
to produce a 269% return on 
investment over five years, 
not counting additional rev- 
enue it might bring from 
















first and foremost, on a cen- 
tralized basis,” he says. “It 
used to be a tremendous 
overhead for a hotel to keep 
the rate tables up to date, to 
keep the equipment config- 
ured properly and s so on.’ 
“Tt’s pretty slic 
W. Douglas Lewis, a senior 
partner at Edge Consulting 
Group LLC in Atlanta and 
former CIO at InterConti- 
nental Hotels Group. “It al- 
lows your frequent stayers 
to automatically get the 
charges not put on the bill. It 


www.computerworld.co 


removes one of the largest 
dissatisfiers of hotel guests.” 
Lewis also praises the sys- 
tem’s architecture. “They 
have managed to link their 
ByRequest database in wi 
their call-accounting system 
and the PBXs in the hotels. 


That’s technically very inter- | 


esting,” he say 

Some of the project’s in- 
novations were more prosa- 
ic. It was necessary to install 
a brick-size data-collection 
and network-interface de- 
vice at every hotel, but Hed- 
ley d want to bear the 

nding an IT person 

to each site to do that. “We 


www.computerworld.com 


created a very extensive set 
of instructions, a book, on 
how to install the device,” he 
says. “We had to make it so 
anyone could install it, but 
here we were asking them to 
touch the parts of a phone 
system that you generally 
wouldn’t touch.” 

Senior project manager 
Doug Oppenheimer wrote 
the instructions and even 
photographed a Phillips 
screwdriver to show the in 
stallers what one looks like. 
“I came from a hotel before 
getting into IT,” says Oppen- 
heimer. “I said, ‘How would 
someone who never saw a 


He) LESS 


This is the first time 
in the industry this 
has been done, first 
and foremost, on a 
centralized basis. It used to be 
a tremendous overhead for a hotel 
to keep the rate tables up to date, 
to keep the equipment configured 
properly and so on. 


- MARK F. HEDLEY, 


computer deploy this d 
properly the first tin 

Oppenheimer also set up a 
Web site with frequently 
asked questions about the 
new system, created a train- 
ing course that could be 
downloaded or obtained on 
a CD, and be sted every 
thing at two hotels. 

“The whole implementa- 
tion of that device went 
seamlessly, vs. what a disas- 
ter it could have been and 
how much time and cost it 
could have added,” Hedley 
says. “We did the entire sys- 
tem rollout in 90 days.” 


@ 44360 
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BY STEVE ULFELDER 
N LATE 1997, Ohio’s state 
legislature passed a bill 
ordering government 
agencies to streamline 
convoluted processes in 

the areas of workers’ com- 

pensation, employer tax 
withholding and tax filing. 
The legislators were, ad- 
mirably, responding 
to businesses’ con- 
cerns about the 
amount of time re- 
quired for these ad- 
ministrative tasks. 

But they didn’t ad- 

dress details such as 

funding and project 
ownership, and so 


made little headway 
for two j 
When Gregory S. Jackson 
signed on as Ohio’s CIO in 
2000, he made meeting the 
demands of the unfunded 
mandate an immediate pri- 
ority because, Jackson says, 


ars. 
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BY MARC L. SONGINI 
HEN network 
hardware mak- 
er Nortel Net- 
works Ltd. be- 
gan a major 
CRM initiative in 2000, the 
goal was to connect all cus- 
tomer-facing processes and, 
in so doing, slash support 
costs and boost sales. 


Because Nortel had many 
individual busin s 
that catered to different mar- 
ket segments, there were 
more than 25 sales and 130 
customer support systems in 
place, some overlapping. The 
system was clearly fi- 
cient: For example, it took 50 
seconds for customer service 


agents to answer calls at peak | 


Gregory S. Jackson, 
Ohio House Bill 202 ©10 of the state gov- 
ernment of Ohio 


he agreed with the legi 
ture that a more user-friend 
ly system was important for 
the state’s employers. The 
resulting portal, dubbed 
the Ohio Bus Gateway, 
has exceeded demands at 
every turn. Small and medi 
um-siz 
portal’s single interface to 
transact with the 
state taxation, 
workers’ compensa- 
tion, family services 
and administrative 
services ager 
the time they spend 
on such tasks has 
dropped 36%, state 
studies show. 
Jackson concedes 
that gaining the 
agencies’ initial cooperation 
was the toughest part of the 
project. Gartner Inc. analyst 
John Kost isn’t surprised. 
“The main currency of gov- 
ernment isn’t income or 
wealth. It’s power,” he says. 


businesses use the 


times, and the abandoned 
call rate was nearing 

“Our customers were 

becoming frustrat- 

s project leader and 
CIO Albert Hitchcock, who 
is based in Research Trian- 
gle Park, N.C. 

The project’s main goal 
was to have one integrated 
system that could handle the 
entire customer experience, 
from point of sale to product 
installation and support. 

To do this, Nortel execu- 
tives decided to consolidate 
the company’s various legacy 
CRM systems into one built 
around Amdocs Lt ari- 
fy software. This required a 
phased rollout, prioritize 
based on business needs 
and evaluated by a mixed 
business and IT review 
board. Each individual u 
grade had to be finan 
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“So creating a multidepart- 
ment portal is viewed by 
those agencies as diminish- 
ing their power. That’s going 
to affect their behavior.” 

In 2000, Jackson says, he 
told a group of out 
sultants who were evaluat- 
ing state processes that “we 


ide con- 


were having trouble getting 
traction” with the project. 
Those consultants recom- 
mended that a director from 
>cted agency be per- 
suaded to own the project. 
“That way, it would clez 
be an agency priority,” Jack- 
. “not just another IT 
project within each agency.” 
At that point, Jackson got 
some help when Ohio Gov. 
Bob Taft became involved 
and requested that the Ohio 
Department of Taxation di- 
rector take on sponsorship. 
“That was an amazing turn- 
” Jackson says. Not 
only was the project kick- 
started, but the ensuing dis- 


an é 


son saj 


ing po 


justified based on its merits. 
By breaking the project 

into parts, the IT team ulti- 

mately was able to put to- 

gether a huge single instance 

of CRM software, says Beth 

Eisenfeld, an analyst at Gart- 

ner Inc. Nortel ex- 

ecutives probably 

wouldn’t have ap- 

proved the project’s 

final price tag, she 

adds, if it had been 

presented in one 

lump sum. 


Ultimately, the , 


project, which cost a Albert Hitchcock, 
total of $30 million, ClO at Nortel Net- 


came in on time and works Ltd. 


on budget and has resulted 

in one of the largest CRM 

implementations in the high- | 

tech industry, Nortel claims. 
There are 19,200 internal 

users on the system, along 

with 200,000 custom 


rsand | 


State of Ohio 


www.state.oh.us 


@ Organization: The 34th 
largest state by land area in 
the U.S., Ohio covers 116,103 
square miles. Its state capital 
and largest city is Columbus. 


vestment of $1.25 million for 
initial development has re- 
turned 36% time savings for 
Ohio businesses and a 42% 
drop in transaction costs for 
the state agencies involved. 


cussion expanded the gate- 
way’s scope. It was originally 
planned as a mere registra- 
tion tool, but Jackson and 
the new sponsor agreed to 
make it a more ambitious 
transactional portal. 

The next challenge was to 


partners who can access the 
Nortel service applications. 

There is now one major 
call center, down from three, 
and the number of world- 
wide toll-free numbers has 
dropped from 500, to 20. 

Nortel has also 
million by 
retiring some of its 
legac stems. 

The customer 
payback bee 
even bigger: C 
tomers are now 
able to configure a 
switch, check an or- 
der, track a service 
ticket or access doc- 
umentation online. The aban- 
doned-call rate dropped from 
7% to 2%, and the average 
time to answer a call dropped 
from 50 seconds to 14. The 
entire sales cycle has also 
shrunk, from 100 to 60 days. 


saved $ 


BEST IN CLASS 


fund the project. Jackson 
carved out $1.25 million for 
initial development, and in 
early 2002 a lars ale pilot 
was launched. The Ohio Busi- 
sateway became fully 
functional in 2003; program 
director Joe Zapotosky esti- 
mates ongoing operational 
costs at $1.5 million annually. 
By all accounts, the gate- 
way was an immediate smash 
hit. In addition to the 36% 
time savings enjoyed by Ohio 
businesses, the state itself 
has reduced transaction costs 
s by 


42%, according to Jackson. 


for the affected agenc 


“Ohio deserves great credit 
for putting this together,” 
Gartner’s Kost says. 
Jackson says that if he 
regrets anything about the 
proje I 
time pressures, “we didn’t 


‘ause of 


spend as much time on the 
IT are r 
have liked to.” The state 

made some use of Web ser- 


as we might 


The company did learn a 
few lessons along the way. 
In 2002, for example, Nortel 
found that it needed to cre- 
ate a reporting 
make sure the right people 
got the data appropriate for 
them. With business intelli- 
gence software from Busi- 
ness Objects SA, Nortel cre- 
ated a reporting system 
built around 14 individual 
data marts. 

s has resulted in a rise 
in storage costs, up 15% an- 
nually, and the staff is now 
reviewing the system to en- 
sure that only pertinent data 
is being extracted. 

The company was moving 
fast to get people running on 
the system, but in hindsight, 
it should have spent more 
time doing some training, 


system to 


according to Mary Kay Wells, | 


vice president of value chain 


vices, he notes, “but there 
wasn’t a lot of time spent 
thinking about how [the 
portal] is going to play out 
in five years.” In particular, 
Ohio used a Microsoft-based 
architecture but did the bulk 
of its development without 
exploiting the vendor’s .Net. 
Among the state’s next 
steps are possibly shifting to 
-Net and adding an XML in- 
terface, Zapotosky says. Al- 
ready, Jackson’s team has 
panded the Ohio Busine 
Gateway to the local- 
tion level, and the state is 
working with the Internal 
Revenue Service to allow 
Ohio businesses to pz 
eral taxes at the portal, too. 
Small wonder that the 
portal has been widely 
imitated by other states. 


@ 44368 
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Ulfelder is a freelance writer 
in Southboro, Mass. Contact 
him at sulfelder@charter.net. 


Nortel 
Networks Ltd. 


PALL e 


@ Project payback: Nortel 
has saved $15 million by retiring 
some of its legacy systems and 
has reduced its abandoned-call 
rate trom 7% to 2%. 


solutions at Nortel. 

“If we needed to do it 
again, we’d emphasize the 
training,” Wells says. 
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systems. By:combining blade servers, 
storage and networking capabilities 
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Continued from page 27 

As the leader of the group, Rybeck | 
plays a role that includes establishing | 
and communicating data standards, | 
ensuring data integrity is maintained | 
during database conversions and doing | 
the logical design for the data ware- 
house tables. She’ll also oversee imple- 
mentation of the Group 1 Software Inc. 
data cleansing system and work with 
The Dun & Bradstreet Corp., whose 
database is used for company-name 
standardization and hierarchies. 

The analysts have their work cut out 
for them. Bringing together customer 
records from the 75 business units 
yielded a 75% duplication rate, mis- 
spellings and fields with incorrect or 


missing data. 

“Most of the divisions would 
have sworn they had great proc- 
esses and standards and place,” 
Rybeck says. “But when you 
show them they entered the 
customer name 17 different 
ways, or someone had en-" 
tered, ‘Loading dock open 
8:00-4:00’ into the address 
field, they realize it’s not as clean 
as they thought.” 


Multitalented 


Although the data steward may report 
to IT — as is the case at Emerson and 
at pharmaceuticals company Sanofi- 
Synthelabo Inc. — it’s not a job for | 
someone steeped in technical knowl- 
edge. Yet it’s not right for a business 
person who’s a technophobe, either. | 
You need someone who’s familiar 
with both disciplines, like Seth Cohen. | 
The first data quality control supervi- 
sor at Sanofi in New York, Cohen was 
hired a year ago to help design auto- 
mated processes to ensure the data 
quality of the customer knowledge 
base that Sanofi was beginning to build. | 


Cohen has enough technical skills to 
be able to spec out a data-cleansing 
system and then work with a developer 
to make sure that the system is written 
correctly. 

But having worked in the pharma- 
ceuticals field for three and a half 
years, he also knows the industry’s 
specific business rules and under- 
stands the most important data con- 
cerns that must be addressed during 
the requirements-gathering stage. 

Data stewards should have business 
knowledge because they need to make 
judgment calls, Cohen says. With 
Sanofi’s data warehouse, for instance, 
if the system expects to get numbers in 
a field but gets a string of letters in- 
stead, Cohen must decide what’s 

wrong and how to correct it. 
Mary Pickett is another data 
steward who has a mix of skills. 
When she joined Winston & 
Strawn LLP, a law firm in 


Chicago, she considered herself | 


a database specialist. Today, 
however, her title is “marketing 
applications specialist,” and 
one of her primary duties is to 
ensure the quality of Winston & 
Strawn’s contact database. 
“Especially in this economy with 


| people moving around, it’s a highly 
| charged, dynamic database that keeps 
| changing,” Pickett says. “If it sits for a 


month, it’s dirty again.” 

Pickett prefers to train business 
users from within the company to keep 
the data clean. Likely candidates in- 
clude paralegals or secretaries who 
manage contact lists for their practice 


groups. Still, she says, it takes a solid 


year for data clerks like them to gain 
the necessary experience to move up 


| to data coordinator. 


The reason: They need to learn not 
only how to sort through duplicate 


DATA STEWARDS AT A GLANCE 
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= Standardize attribute definitions. 
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| company names, make sure contact 


names are associated with companies 
and use the database’s cleansing tools, 
but also how to prioritize which clients 
are the most important to work on. 
“We want to keep our top clients as 


| clean as possible,” Pickett says. 


Perfection Unattainable 
Indeed, judgment is a big part of the 
data steward’s job — including the 
ability to determine where you don’t 
need 100% perfection. 

At OneSource Information Services 
Inc., a provider of business informa- 
tion products in Concord, Mass., orien- 
tation sessions include a speech on the 
inevitable dirtiness of data. But at the 


| same time, says Beth Jacaruso, director 


of content management at OneSource, 
the company “lives and dies by data 
quality.” So where do you draw the 
line? That’s where data stewards come 
in: deciding what’s “clean enough.” 
Cohen says that task is one of the 
biggest challenges of the job. “100% ac- 


| curacy is just not achievable,” he says. 


“Some things you're just going to have 
to let go or you'd have a data ware- 
house with [only] 15 to 20 records.” 

A good example is when Sanofi pur- 
chases data on doctors that includes 
their birth dates, Cohen says. If a birth 


| date is given as Feb. 31 or the number 
| of the month is listed as 13 but the rest 
| of the data is good, do you throw out 


all of the data or just figure the birth 
date isn’t all that important? 

It comes down to knowing how 
much it costs to fix the data vs. the 
payback. “You can pay millions of dol- 
lars a year to get it perfect, but if the 
returns are in the hundreds of thou- 
sands, is it worth it?” asks Chuck Kel- 
ley, senior advisory consultant at Navi- 


| gator Systems Inc., a corporate perfor- 


mance management consultancy in 
Addison, Texas. 


Good Diplomats 

Data stewards also need to be political- 
ly astute, diplomatic and good at con- 
flict resolution — in part because the 
environment isn’t always friendly. 
When Cohen joined Sanofi, some 
questioned why he was there. In par- 


| ticular, IT didn’t see why he was “caus- 


ing them so many headaches and 
adding several extra steps to the 
process,” he says. 

There are many political traps, as 


| well. Take the issue of defining “cus- 


tomer address.” If data comes from a 
variety of sources, you're likely to get 
different types of coding schemes. 
“Everyone thinks theirs is the best ap- 
proach, and you need someone to facil- 
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itate,” says Robert Seiner, president 
and principal of KIK Consulting & Ed- 
ucational Services in Pittsburgh. 

People may also argue about how 
data should be produced, he says. 
Should field representatives enter it 
from their laptops? Or should it first be 
independently checked for quality? 
Should it be uploaded hourly or week- 
ly? If you have to deal with issues like 
that and “you’re argumentative and 
confrontational, that would indicate 
you’re not an appropriate steward,” 
Seiner says. 

Most of all, data stewards need to 
understand that data quality is a jour- 
ney, not a destination. “It’s not a one- 
shot deal — it’s ongoing,” Rybeck says. 
“You can’t quit after the first task.” 

@ 45006 


Brandel is a freelance writer in 


Grand Rapids, Mich. Contact her at 
mary.brandel@comcast.net. 
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Emerson Taps ClO 
From Invensys 


Emerson Electric Co. in St. Louis 
recently named Stephen C. Has- 
sell as CIO. He will be responsible 
for customer-focused IT pro- 
grams, including telecommunica- 
tions, applications and hosting for 
the electrical products company. 
Hassell previously was CIO at 
London-based Invensys PLC. 


Briggs & Stratton 
Expands AT&T Deal 


Briggs & Stratton Corp., which 
makes engines for outdoor power 
equipment, awarded AT&T Corp. 
a multimillion-dollar global net- 
working contract. The contract 
renews an existing deal for long- 
distance, Internet, teleconferenc- 
ing and domestic data services. It 
also adds AT&T managed interna- 
tional data service and increased 
networking capacity. 


Reader’s Digest 
Outsources Big Iron 


The Reader’s Digest Association 
Inc. in Pleasantville, N.Y., recently 
confirmed that it has signed a 
long-term agreement to out- 
source mainframe operations to 
Infocrossing Inc. in Leonia, N.J. 
Infocrossing has already taken 
over Reader's Digest’s data cen- 
ter operations and is planning a 
June migration of the mainframe 
computing infrastructure to Info- 
crossing’s data center. 


Digital River Hosts 
Online Toy Store 


Minneapolis-based Manhattan 
Group LLC, known as Manhattan 
Toy, last week launched an on- 
line toy store built and hosted by 
e-commerce outsourcing firm 
Digital River Inc. Eden Prairie, 
Minn.-based Digital River not 
only hosts the specialty retailer's 
site (www.manhattantoy.com), 
but also provides order manage- 
ment, product fulfillment, cus- 
tomer service, e-marketing and 
fraud-prevention screening. 
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Beyond 


trategic Platitudes 


ONVENTIONAL WISDOM says that if you’re 
looking to develop an IT strategy, you start 
with the business strategy and go from 
there. On the surface this makes sense, but 
it almost never works. Business strategies 
are often vague and downright meaningless. Browse a 
handful of annual reports, and you'll see what I mean. 


99 665 


Strategic goals like “product excellence,” “increased 


” 


shareholder value, 


“growth through acquisition” and 


“improved customer satisfaction” don’t say much about 
what’s in store for the company from a business per- 
spective, let alone what the IT organization should do. 


To create a good IT strat- 
egy, IT leaders have to re- 
think the whole concept of 
strategy development. Most 
IT professionals are intro- 
duced to the concept of 
strategic planning by busi- 
ness people, who devise their 
plans by looking at the mar- 
ketplace. Business people 
consider which markets the 
company will compete in, 
which products and services 
they will sell and how they 
will execute on those plans. 
That’s great, but it’s very dif- 
ferent from the way good IT leaders 
develop strategy. 

Let’s assume that a company has the 
best strategic business planners in the 
world. These business planners have 
scanned the market and have devel- 
oped a fully fleshed-out plan to build 
and sell products. They even have an 
excellent operational plan. Even in this 
unlikely scenario, the business strat- 
egy probably won't tell the IT leaders 
exactly what they need to focus on. 

Recognizing this, the IT leadership 
corners the business people and tries 
to “extract” more information from 


at barbgomotski® 
yahoo.com. 


them in order to develop 
an IT strategy. This doesn’t 
work, either, because the 
business people don’t fully 
understand the IT implica- 


tions of their business plans. 
| needs will affect IT. 


If they did, they might not 
need a CIO! 


A Better Way 

While developing an IT 
strategy is difficult, it’s 
worth doing. Instead of look- 
ing at high-level business 
strategies for guidance, IT 
leaders should be gathering 
| information about key areas of the 
business in order to determine their 
strategy. For example, looking at the 
following areas will tell you more 
about what’s in store for IT than those 
business-plan platitudes: 


alization. Consider how far the IT orga- 
nization will have to extend itself in 
the coming year. Is the company mov- 
ing into new geographies? If so, how? 

| Also, look at how IT will have to 
change or evolve to support an in- 

| creasingly virtual enterprise. Consider 
' the needs and issues that remote em- 





Geographic expansion and corporate virtu- 


| ployees and disconnected business 


partners will present to IT. 
Governance and compliance. How is the 


| company planning to make key deci- 


sions in the future? With a renewed fo- 
cus on corporate governance, IT deci- 


sion-making is evolving in many com- 
| panies. These changes will affect the 


kinds of IT initiatives that are funded 
in the coming years. Also consider 


how compliance with the latest regula- 
| tory requirements will influence IT 
| priorities. 





| 


Future of the business. How is the 


| business evolving? A company that’s 


changing from being a manufacturer 
to being a marketing company is going 
to see a major shift in its IT priorities. 
Consider what the IT road map might 
look like as the business undergoes its 
transformation. This is also a good 
time to look at how customer needs 
are changing and how those changing 


Business attitude toward IT spending. 


For the past two years, most compa- 
| nies have been in a cost-cutting mode 


regarding IT, which has had a signifi- 
cant effect on IT strategies. As the 
economy improves, consider how 
business leaders’ attitudes toward 
spending money on IT will also 
change. Consider whether the willing- 


} Ness to invest in IT will keep pace 
| with or lag the economic recovery. 


These are some of the main issues 
to consider when developing an IT 
strategy, but it’s not an exhaustive list. 
IT leaders will still need the help of 
business executives to develop an 
IT road map. But they shouldn’t ex- 
pect the business strategy to miracu- 


| lously lead them to an IT strategic 


| plan. @ 44893 
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DOES LINUX ADD UP TO LOWER TCO? 
ASK THE EXPERTS. 





‘Although the Linux OS itself is nominally free, 
Linux is only one component of an increasingly 
complex application infrastructure stack.... 
From a total-cost-of-ownership perspective, 
we believe the overall application costs of 
integration and ongoing infrastructure 
management and support far outweigh one-time, 
upfront hardware and OS software costs.” 


—META Group, November 2002 
Linux Servers: No “Silver Bullet” for Total Cost of Ownership 


Leading independent research analyst META Group found in a recent study that Linux 
on Intel infrastructure costs are not lower than Windows“ on Intel. To get the full study 
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security your company really needs. All inside one intelligent box. 
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Privacy Potholes 

IT managers like Nationwide 
Mutual’s Kirk Herath (left) offer 
advice for avoiding process and tech- 
nology potholes when complying 
with privacy regulations. PAGE 36 


KNOWLEDGE CENTER 
_PRIVACY 


Losing Control 
IT pros offer tips for 
controlling sensitive 


customer data when it’s in 


the hands of third-party 
outsourcers. PAGE 38 
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OPINION 
RFID Privacy Scare Is Overblown 


Columnist Jay Cline says the RFID 
community needs to counteract the 
public hysteria about possible privacy 


abuses. PAGE 44 


| 
| 





Compliance 
Headaches 


A patchwork of inconsistent 
rt and vague laws make it tough 


for IT to do the right thing. 


EDITOR’S NOTE 


ADMIT IT: I was a policy wonk. 
As this newspaper’s Washing- 

ton correspondent many years 

ago, I covered literally hundreds 

of congressional hearings — 
many of them about privacy. I had my 
nose in the fine print of the Federal 
Register and the Congressional 
Record. I huddled with anonymous 
congressional staffers to get the lat- 
est markup drafts of bills in subcom- 
mittee. I used to be able to quote key 
passages from my dog-eared copies 
of the Computer Fraud and Abuse 
Act and the Electronic Communica- 
tions Privacy Act. I sat in the Capitol 
galleries and watched votes for land- 
mark legislation. 

And I was naive. I thought that the 
young staff attorneys drafting the 
legislation knew what was best for 
the country. I scoffed at industry 
complaints about various provisions 


being too hard to implement. Busi- 
nesses also feared a hodgepodge of 
privacy laws across the 50 states, but 
I was skeptical of arguments for fed- 
eral preemption of state privacy laws 

Older and wiser now, I know that 
those inconsistent and vague laws 
can make it tough for IT managers to 
comply even when they truly want 
to. The best intentions of those 
young staff attorneys can cause seri 
ous headaches for business folks out 
side the Capital Beltway, as the first 
story in this special report shows. 

I still think policy-makers do the 
best they can when they write the 
laws. But I’ve learned that the law of 
unintended consequences is the most 


powerful law of all. @ 45078 


Mitch Betts is Computerworld’s 
Features editor. Contact him at 
mitch_betts@computerworld.com. 
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OMPANIES WORKING hard 

to comply with a bewilder- 

ing array of fast-changing 

state, federal, international 

and industry-specific pri- 

vacy rules are uncovering 
a variety of practical problems along 
the way. 

Rising concerns over personal priva- 
cy and data-sharing practices have fo- 
cused on increased liability risks relat- 
ing to how personal data is handled. At 
the same time, the trend toward ex- 
tending the enterprise is making it 
harder than ever for companies to keep 
track of and protect such data. 

IT managers dealing with these 
privacy regulations offer their best ad- 
vice for avoiding the technology and 
process potholes. 


POTHOLE: 
Patchwork of Laws 


The sheer number of privacy regula- 
tions and new mandates coming down 
the pike make privacy compliance a 
huge challenge, says Kirk Herath, chief 
privacy officer at Nationwide Mutual 
Insurance Co. 

Some of the biggest drivers include 
the Health Insurance Portability and 
Accountability Act, the Gramm-Leach- 
Bliley Act, the Sarbanes-Oxley Act and 
California’s SB 1386 identity protection 
bill. On the horizon are other state and 
federal versions of SB 1386. Several 
states — most notably California — 
have their own privacy laws. Interna- 
tional rules, such as those covering Eu- 
ropean Union nations and Canada, are 
also forcing U.S. companies to con- 
front privacy issues. 

“Over the past two years, we’ve had 


Putting privacy 


| 


KNOWLEDGE CENTER PRIVACY 


over 1,000 new privacy laws that have 
affected us,” says Joel Tietz, chief pri- 

vacy officer at AXA Financial Services 
LLC in New York. 


| SIDESTEP: Instead of trying to craft 


| 


policies for every single law, it’s often 
better to try to comply with the re- 
quirements of the most stringent laws 
where possible, privacy experts say. 
Don’t shoot for meeting the minimum 
requirements, Tietz adds. “We took the 
best of what we saw in all of the vari- 
ous requirements,” he says. The com- 
pany then crafted a policy to meet 
those standards. 


| POTHOLE: 


Complex Requirements 
Writing a standard privacy notice that 
encapsulates all regulatory and legal 
requirements can be a huge challenge, 
Herath says. Privacy notices, which are 
required in every state, spell out a 
company’s policies for handling per- 
sonal data. Several laws require com- 
panies to clearly articulate what they 
can or can’t do with confidential infor- 
mation. But differing requirements 
make it hard to draft a standard policy, 
Herath says. 

For instance, at least 17 states still 
use privacy provisions from a 1982 in- 
formation practice act that requires in- 
surance companies to use specific 
phrases — relating to how information 
might be shared for law enforcement 
purposes, for example — when craft- 
ing a privacy policy. 

Much of the language contained in 
such laws is written at a college read- 
ing level. “Yet you have to economize 
on your language and the complexity 


legislation into 
practice means learning how 
to sidestep legal and technical 
problems. By Jaikumar Vijayan 


Privacy Pothe 





of what you are saying” to get the no- 
tice down to a ninth-grade reading lev- 
el to meet some state requirements, 
says Herath. For instance, “instead of 
talking about how we can share infor- 
mation for law enforcement and anti- 
fraud purposes, you boil it down to ‘as 
required by law,’” he says. Similarly, 
some states require that companies in- 
clude opt-in policies in their privacy 
statements. Opt-in policies require 
companies to seek and receive a 


| 
| 
| 
| 
| 
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user’s permission to collect and use 
personal data. 


SIDESTEP: Here again, Herath suggests 
making the policy as broadly applica- 
ble as possible. Start with the most 
stringent requirements first and draft a 
policy statement written for those re- 
quirements. 

“Tt can be done, but not easily,” says 
Herath. Drafting a solid policy can take 
several weeks to several months and 
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requires input from business units as 
well as legal and compliance teams, 
says Herath, who manages 35 such 
notices for Columbus, Ohio-based 
Nationwide’s business units. 


POTHOLE: 


Far-flung Data 


But it’s not enough to say what you’ll 
do. You also need to do what you say. 
And that means putting in place the 
technology and processes to monitor 
and ensure compliance with stated pri- 
vacy policies, experts say. 

“The biggest issue facing corpora- 
tions with respect to privacy is estab- 
lishing control over all their data,” says 
Arshad Noor, CEO of StrongAuth Inc., 
a Cupertino, Calif.-based identification 
management firm. 

This data includes not only what’s 
on production systems and backup 
servers and sites, but also everything 
stored on distributed client systems 
and flowing across enterprise and 
partner networks, he says. 


SIDESTEP: To gain control, says Noor, 
companies must establish a detailed 
inventory of all sensitive data every- 
where in the corporation, review all 
controls relating to the use of that data | 
and set up controls and procedures to 
protect the data. 

“All of this will require capital ex- 
pense, potentially hiring new people 
and buying new tools,” he says. 


POTHOLE: 
Honoring Customer 
ferences 


Technology advancements have made 
it easier for companies to use and 
manipulate customer data, but that 
also makes it imperative to monitor 
and ensure privacy compliance, says 
Tietz. 

For example, because AXA’s CRM 
systems allow it to mine customer 
data, the company has to be careful 
that the information isn’t being com- 
bined or shared in a manner that 
doesn’t gel with a customer’s privacy 
preferences, Tietz says. 

“I view technology as one of my 





THE ANNUAL COST OF 


PRIVACY PROGRAMS 
Companies spend more on privacy 
activities as their programs mature. 


with more than 1,000 employees 
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backstops to ensure that data is not 
flowing in an inappropriate manner,” 
he says. 


SIDESTEP: AXA has built a database 
that consolidates customer informa- 
tion from multiple applications and 
production systems. Each customer 
record in the database has an embed- 
ded “privacy indicator” that describes 
in detail that customer’s privacy pref- 
erences. The database is linked to 
every legacy application at AXA. The 
goal is to make sure that a customer’s 
privacy preferences are always re- 
spected, regardless of which applica- 
tion is accessing the customer data, 
Tietz says. 

“Many departments are charged 
with using customer information to 
make a profit for the company,” Tietz 
says. “An aggressive use of such infor- 
mation may be beneficial to the bot- 
tom line but must always be weighted 
against privacy needs.” 

AXA, which manages more than 
$450 billion in assets, also uses a Web 
monitoring tool to ensure that the in- 
formation on its Web pages and its use 
of cookies are compliant with the com- 
pany’s stated privacy policy, Tietz says. 
POTHOLE: 

Vague Language 

The lack of legal precedent and imple- 
mentation guidelines poses a problem 
for companies trying to figure out the 

best way to mitigate exposure to legal 

risk, says Erin Kenneally, a forensic an- 
alyst at the San Diego Supercomputer 

Center at the University of California, 

San Diego. 

Privacy laws such as Gramm-Leach- 
Bliley and SB 1386 merely specify what 
is expected of companies from a regu- 
latory standpoint without explaining 
what they need to do from an imple- 
mentation standpoint, Kenneally says. 





“I see it as a combination of seman- 
tic differences between the legal and 
policy folks who write the laws and the 
techies who have to implement them. 
It becomes an issue of extrapolating 
technical solutions from abstract ideas 
and words,” Kenneally says. 

Examples of such vagueness abound. 
California’s SB 1386 requires compa- 
nies to “encrypt” data, but it doesn’t 
specify the level of encryption re- 
quired. Similarly, the law requires 
companies to inform customers of any 
“unauthorized access” to their data but 
doesn’t define what constitutes unau- 
thorized access. 

As a result, companies may decide 
to “just do the very minimum and 


| comply with the letter of the law, 


while in practicality [that doesn’t] 
really provide the protection that 
the spirit of the law was meant to ad- 
dress,” Kenneally says. “It is entirely 


| conceivable that a civil or a criminal 


claim under SB 1386 could be raised if 
minimal, almost ineffectual measures 
are used.” 


| SIDESTEP: The key, again, is to take the 


high road. The best way to demon- 
strate due diligence is to comply with 
the requirements of the most stringent 
law that’s applicable to you, Kenneally 
advises. 


| POTHOLE: 


| Uncontrolled Partners 


Programs for monitoring the privacy 
habits of your vendors, business part- 
ners and supply chain companies are 
also needed, says Herath. It’s crucial 
to realize that a company owning the 
data is responsible for it even if a secu- 
rity breach is associated with a partner, 
he says. 

“As we use more third parties, vet- 
ting them and the contracts they sign 








becomes more important and more 


| difficult,” Herath says. 


| SIDESTEP: Nationwide has implement- 


ed a few third-party monitoring and 


| compliance measures to address the 


problem. 

All companies doing business with 
Nationwide have to fill in a Web-based 
self-assessment form that allows the 


| insurer to quickly gauge the strength 
| of its partners’ privacy practices and 
| sort them into separate risk categories. 
| Depending on the sensitivity of the in- 


formation being handled, Nationwide 


| might ask a company to implement 


stronger privacy policies. Each compa- 


| ny also needs to submit to regular pri- 
| vacy audits. 


When it comes to partners that 


| are based offshore, Nationwide has 

| instituted “deeper due diligence and 

| security,” Herath says. This includes 

| putting Nationwide’s own security per- 


sonnel at an offshore location to en- 
sure that “people don’t leave with 


| things they are not supposed to leave 


with,” he says. 

This level of physical security is es- 
pecially a concern at a time when tech- 
nology has made it possible for users 


to store vast amounts of data as stor- 
| age devices get smaller, Herath says. “A 


few years ago, you would need a truck 
to take it away. Today, all a user needs 


| is a key fob,” he says. @ 45101 


| THE POWER OF PRIVACY 





Legal requirements and corporations’ concerns about 
their reputations are pushing the need for holistic 
privacy programs, users say: 


| QuickLink 41835 
| Test your knowledge: How well do you know the 
| rules regarding responsible information handling? Take 


our online quiz to find out 
QuickLink 45268 
www.computerworld.com 


The Mosaic Effect 


DATA ELEMENTS that in isolation 
look relatively innocuous can amount 
to a privacy breach when combined, 
warns Elizabeth Gorgue, privacy officer 
at the e-Government Office at the 
County of Santa Clara, Calif. 

In the intelligence community, that’s 
known as the “mosaic effect” - when 
combinations of data tidbits produce a 
picture that wasn't apparent from the 
individual pieces. 

As the delivery arm of a number of 
state and federal programs, the county 
collects and maintains an enormous 
amount of data on individuals, including 


information about their medical and 
mental health histories, criminal 
records, demographic profiles and wel- 
fare benefits. “The kind of information 
we gather and maintain leads us to be 
especially concerned about privacy,” 
says Satish Ajmani, the county's CIO. 

To ensure better privacy protection, 
the county has launched a major data 
classification project. Its goal is to lo- 
cate and classify every bit of confiden- 
tial information it manages in order to 
get a better handle on what's critical to 
privacy and what's not, Ajmani says. 

- Jaikumar Vijayan 
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How do you protect sensitive data when it’s 
in the hands ofa third party? By Stacy Collett 


WOMAN IN PAKISTAN re- 
cently struck fear among 
IT executives who out- 
source. She had obtained 
sensitive patient docu- 
ments from the Universi- 


ty of California, San Fran- | 


cisco, Medical Center through a med- 
ical transcription subcontractor that 
she worked for, and she threatened to 
post the files on the Internet unless 
she was paid more money. 

The story didn’t sit well with John 
Golden, CIO at CNA Financial Corp., 
a $12.3 billion insurance company in 
Chicago that outsources a small por- 
tion of its billing functions to India. 
Golden’s team implemented a slew of 
physical, technical and contractual se- 
curity precautions to protect customer 
data, such as sending only necessary 
bits of customer information, backing 
up files in a centralized server at the 
home office and putting tough restric- 
tions on employee turnover at the out- 
sourcing facility. But there’s always a 
horror story to make him wonder. 


“I wish I could say we have the secu- | 


rity issue licked,” Golden says. “We 
haven't had any security breaches to 
our knowledge in this space” since 
CNA began outsourcing its billing 





function a year ago. But with the grow- 
ing number of sophisticated hackers, 
terrorist threats and old-fashioned 
opportunists, the threat of a security 
breach looms daily. 

The outsourcing train has left the 
station with many top financial, health 
care, tax reporting and credit reporting 
companies on board. The business 


(emda Ces) 8 
Data Safe 


& Visit the outsourcing site. 

@ Require the outsourcing vendor to 
provide proof of a security audit by a 
reputable third party or industry group. 
® Conduct a remote vulnerability scan 
to determine what internal information 
you can access from the outside. 

® Provide only partial information about 
a customer - not the full profile. 

® Put subcontracting limits into the 
contract. 

®& Make sure the contract includes a lim- 
it on employee turnover at the out- 
sourcer. 

@ Ask the outsourcing vendor to provide 
a paperless clean-room environment. 
© Keep the centralized database at your 
home site, not overseas. 





process outsourcing market in India 
alone is expected to grow 54% to 

$3.6 billion by the end of this quarter, 
according to the National Association 


| of Software and Services Companies, 


a New Delhi-based organization made 
up of 800 Indian IT and outsourcing 
companies. 

Industry observers warn that if out- 
sourcing isn’t done thoughtfully, with 
proper security controls beyond the 
encrypted domain level, companies 
will have their own horror stories to 
tell. Here are their tips on controlling 
data that’s in the hands of a third party: 


Ask to See a Security Audit 


“If you’re handling financial data or 
health data, you are required by law to 
have an information security plan that 
has administrative, technical and phys- 
ical steps taken to safeguard the data 
— even less sensitive customer con- 
sumer data,” says Becky Burr, an attor- 
ney and member of the International 
Association of Privacy Professionals 
in Philadelphia. 

Though the requirement is broad 
and doesn’t point to one particular 


| standard, Kelly Kavanagh, an analyst at 


Gartner Inc., says outsourcing vendors 


| 
should provide evidence that they 


have undergone a security audit by a 
reputable third party, such as a Big 
Four accounting firm. 

Audits using standards provided by 
a government agency such as the Na- 
tional Institute of Standards and Tech- 
nology or a Statement of Auditing 
Standards 70 form also provide protec- 


| tion. But many outsourcing firms balk 


at the high cost of those audits — some 
run to six figures — and choose less 
expensive documentation. 

Some outsourcing vendors conduct 
audits against vertical industry stan- 
dards. Health care companies should 
see an audit related to Health Insur- 
ance Portability and Accountability 
Act (HIPAA) regulations. CIOs in the 
financial services industry can look for 
audit guidelines under the Gramm- 
Leach-Bliley Act. 


Set Up a Clean Room 


Some facilities handling sensitive data 
require a clean-room environment to 
keep information from literally walk- 
ing out the door. 

Peter Bendor-Samuel, CEO of The 
Everest Group, an outsourcing consult- 
ing firm in Dallas, describes a standard 
clean room: “All the machines and out- 
put devices except for terminals are 
disabled. You can’t copy, can’t use a 
hard drive or a PDA to get information 
out of there. Their servers reside back 
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in the U.S. So there’s no way to get 
data out of there.” 

What’s more, employees are physi- 
cally searched when entering and leav- 
ing. “These are extraordinary precau- 
tions,” says Bendor-Samuel, and they 
might not be for every company. 


Limit Access to Data 

At CNA, all workers enter the central- 
ized server through CNA’s intranet, 
where they can also view links to 
CNA’s methods and procedures and to 
the company’s chat site. To handle its 
growing outsourcing needs, CNA in 
April will roll out a companywide por- 
tal that will restrict access based on 
user identity. A customized screen will 
pop up at the outsourcing facility with 
only a few options. 

Once offshore workers have access 
to the server, CNA limits the amount 
of client information they can see. “If 
we're trying to verify that a customer 
is a good credit risk, we don’t have to 
send all parts of the application, just 
[those] required to approve the appli- 
cation,” Golden says. 


Know Your Workers 


No matter how many safety precau- 
tions are taken, it’s hard to stop the op- 
portunist who steals data for money or 
revenge. James “Zeke” Zoccoli, CIO at 
LifeCare Management Services LLC, 
says the best way to keep his compa- 
ny’s outsourced medical transcription 
records safe is to know the outsourc- 
ing workers and make sure they’re 
trained properly about procedures and 
legal consequences. 

“We do that through training, agree- 
ments and contracts,” says Zoccoli. 
LifeCare, a Plano, Texas-based opera- 
tor of 20 long-term-care hospitals in 
nine states, outsources 400,000 lines 
of medical transcription data each 
month to Affiliated Computer Services 
Inc. in Dallas. Transcriptionists have 
HIPAA training and know the rules 
and regulations required to maintain 
compliance with privacy standards. 

Zoccoli and Golden also recommend 
sending people to visit outsourcing 
sites regularly to meet employees and 
monitor employee turnover and sub- 
contracting activities. @ 44721 





Collett is a freelance writer in Chicago. 
Contact her at stcollett@aol.com. 


PRIVACY PERILS 


Outsourcing jobs to offshore destinations can sharply 
increase data privacy risks and the complexity of 
managing that risk, experts say: 
QuickLink 44926 
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need access to up-to-the-minute information, 


anywhere, anytime 


The Nokia range of mobile business devices 
and email solutions put effective business tools 
at the fingertips of today’s information driven 
mobile user. Nokia combines voice, messaging 
and PDA features in one easy to carry device. 
Do your users need full email access with 
attachment reading? When empowered with 
Nokia email solutions, your workforce can have 
secure access to corporate email accounts and 


critical information on the go. 


Even on the move, your workforce can stay 


connected, in control, and open for business 


anytime, anywhere access to email 


Learn more about mobilizing your business. 
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HRISTIAN NORTHEAST 


All the rage in the bbom 
years, chief privacy officers 
lost traction with the down- 
turn. New privacy regula- 
tions are restoring their 
clout. By Steve Ulfelder 


N 1999 AND 2000, a new title made its way into 
many executive suites: chief privacy officer. Re- 
action was mixed. Some CIOs and analysts wel- 
comed the concept of a corporate privacy czar, 
while skeptics viewed the CPO boomlet as pub- 
lic relations gloss whose sole function was to 
assuage consumers’ privacy fears. 

The economic downturn of 2000-03 brought the 
CPO trend to an inglorious halt. “Over the last few 
years, the economy made it hard to bring in people 
except in industries where CPOs were mandated,” 
says Herman Collins, CEO of Privacy Leaders, a Las 





Vegas-based executive search firm that focuses on 
privacy professionals. 

But the worm has turned. The economy is percolat- 
ing, hiring bans are easing — and U.S. companies face 
an imposing array of privacy-related regulations, in- 
cluding the Health Insurance Portability and Account- 
ability Act (HIPAA) and the Gramm-Leach-Bliley Act. 

Against this changing backdrop, it’s time to check 
in on the status of CPOs. 


Regulatory Surprise 

According to corporate privacy experts, federal regu- 
lations such as HIPAA, the Sarbanes-Oxley Act, the 
Fair Credit Reporting Act and Gramm-Leach-Bliley 
are affecting enterprises in significant, but perhaps 
counterintuitive, ways. Far from creating a second 
CPO boon, these regulations may actually be split- 
ting privacy measures between two camps: 

@ Those in the “CPO Classic” camp advocate hir- 
ing genuine corporate officers charged with proac- 
tively considering the ethical, competitive and strate- 
gic implications of privacy. 


® The “Compliance Is King” camp is i "J 0l-we)aB ite atencXe 
narrowly focused on meeting the letter ; 


Late 2000: 67 chief privacy 
officers attend the first 
meeting of the Association of 
Corporate Privacy Officers. 
2001: At least 100 busi- 
nesses employ CPOs, ac- 
cording to Alan F. Westin, 


president of nonprofit Priva- 
cy & American Business. 


2003: The two largest CPO 


of the various federal, industry and 
state privacy regulations. 

There is widespread agreement, es- 
pecially among disappointed CPO 
Classic advocates, that the explosion 
of privacy regulations, combined with 
limited resources, has produced heavy 
emphasis on compliance. “Most compa- 
nies have shifted from a privacy ap- 
proach that would be based on pro- 
active steps, competitive-edge orienta- 
tion and customer trust building to a 
narrow legal-compliance priority,” 
says Alan F. Westin, president of the 
Hackensack, N.J.-based nonprofit orga- 
nization Privacy & American Business. 
“This shifts power to the legal folks ... 
and away from CPOs, and it also leads 
companies to spend tight dollars on 
outside legal counsel, again, for narrow 
law compliance.” 

Richard Purcell, CEO of Corporate 
Privacy Group, a Seattle consulting firm, agrees. Pur- 
cell pushed for creation of the CPO position at Mi- 
crosoft Corp. and served as that vendor’s first CPO 
from 2000 until early 2003. 

“Unfortunately, the response to [regulations like] 
HIPAA has been to make privacy officer a compli- 
ance job, not proactive or strategic,” Purcell says. “I'd 
argue that that’s in conflict with the initial focus, 
which was more entrepreneurial.” 

A perfect example of compliance-driven privacy 
measures is the HIPAA mandate that any health-care- 
related business name a privacy officer. That includes 
major hospital chains, but also “a seven-person den- 


| tal office,” Purcell says. Thus the roster of CPOs is 


growing (see chart), but it’s hard to see how the new 
title — which in thousands of small medical offices is 
likely to be awarded to an already overworked assis- 
tant — will advance the cause. 

Membership in the leading CPO group, the Phila- 
delphia-based International Association of Privacy 
Professionals, is about 1,000. Because of mergers 
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among privacy groups, apples-to-apples comparisons 
are difficult to come by, but Westin says the growth 
in strategic CPOs plateaued in 2001; he believes that 
there are about 2,000 CPOs in the U.S. but that most 
of those are sops to HIPAA compliance. 

Still, the CPO field isn’t without heavy hitters: Pri- 
vacy Leadership Group, part of Privacy & Anierizan 
Business, is composed of 16 CPO Classics — Westin 
calls them “strategically oriented CPOs” — from or- 
ganizations such as Citigroup Inc., American Express 
Co., Bank of America Corp., the U.S. Postal Service, 
Nationwide Mutual Insurance Co., Equifax Inc., 
Hewlett-Packard Co. and Microsoft. Nearly all of 
these enterprises have had CPOs since 2001. 


Clout Is Critical 


In the Information Age, it seems clear that the rela- 
tionship between a CPO and his employer’s IT orga- 
nization is critical. The Ponemon Institute LLC, a 
Tucson, Ariz., think tank focused on corporate priva- 
cy issues, recently surveyed 64 companies that have 
CPOs. According to institute Chair- 
man Larry Ponemon, companies 
whose “CPO has at least a dotted-line 
relationship to the CIO tend to have 
more effective privacy programs.” 

The key reason, Ponemon adds, is 
that privacy is so tied into IT func- 
tions that even the best privacy poli- 
cies are fruitless unless they can be 
implemented — reliably and repeat- 
ably — by the IT group. Indeed, West- 
in says, “Many of the hard issues fac- 
ing companies are shifting also to 
ClOs. Their systems must track opts, 
do-not-call lists, etc., and must try to 
develop more secure customer and 
consumer identification — especially 
to control ID theft.” 

Former CPOs and privacy experts 
say this relationship varies widely 
from company to company, relying al- 
most totally on the CPO’s background 
and personality. 

“T'd call those relationships ‘intense- 
ly variant,’ ” says former Microsoft 
CPO Purcell. “People in IT have titles and creden- 
tials that are provable. ... They often have a hard 
time with a privacy person because there’s no objec- 
tive credentials. A CPO could be from legal, compli- 
ance, HR, anything.” Partly because of this discon- 
nect, many CIOs are unsure of their role, “unless a 
smart CPO creates a working committee that brings 
the CIO into a privacy task force,” Westin says. 

One thing seems clear: As Westin says, regardless 
of the future of the CPO, “in smart companies, CIOs 
are front and center” where privacy is concerned. 


@ 44723 





Ulfelder is a Computerworld contributing writer in 
Southboro, Mass. Contact him at sulfelder@charter.net. 


C50s AND PRIVACY 


Privacy and regulatory issues are landing on the chief security officer's 
plate, too. Is that too many functions to ladle out to one position? 
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Information Lifecycle Management: 
The Smart Way to Save Money 


CERTAINLY, SMART COMPANIES 
recognize that information is the linch- 
pin of their success. In most organiza- 
tions, corporate information is their 
most valuable asset, the key ingredient 
with which innovative new business 
models are built. 

“The ability to use and leverage 
information as a company to drive 
additional business is critical,” says 
Mark Lewis, chief technology officer 
at EMC in Hopkinton, Mass. “For 
many companies, smart use of infor- 
mation has truly become a differen- 
tiator, particularly as technology pro- 
vides companywide access.” 

But if innovative information man- 
agement is the ultimate goal, then the 
immovable object squarely in its path 


is the reality of today’s lean IT budgets. 
Technology is the vital framework on 
which companies rely to help business 
information flow freely, but many 
worthy efforts have been hamstrung 
by the flat or declining budgets of the 
past several years. 

Yet limited resources are no 
excuse for limited action, says Chuck 
Hollis, vice president of platforms 
marketing at EMC. “More and more 
companies are realizing that informa- 
tion is money, and they have to do a 
better job of managing their money,” 
he says. “But all this is happening as 
IT budgets are flat and labor costs 
are growing.” 

Spurred by boardroom-level con- 
cerns about the escalating costs of 
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“Our 
business was 
able to cut 
support 
staffing by 30 
percent, yet 
increase its 
throughput 
by 20 
percent. 
[ILM] hada 
significant 
bottom line 
impact and a 
net delta of 
somewhere 
around 
10 percent 
in our 
profitability, 
directly 
attributable 
to this 
planned 
technology.” 


technology, IT executives have embarked 
on a constant search to make their infra- 
structure as streamlined and cost-efficient 
as possible. 

Many have already implemented meas- 
ures that address cost-cutting on a piece- 
meal basis—server consolidation or out- 
sourcing, for example—but also need 
a method of reducing infrastructure 
and information management costs 
enterprise-wide. One intriguing answer: 
Information Lifecycle Management (ILM), 
which offers an opportunity to streamline 
infrastructure costs across the board by 
tying the business value of information to 
the cost of managing it. 

“If you think of information bits as 
assets, Information Lifecycle Management is 
the alignment between the value of informa- 
tion and how much a company is spending 
to make it available to people,” says Hollis. 

Information Lifecycle Management can 
help streamline operational costs. New 
York’s Rogers Medical Intelligence 
Solutions has recognized significant cost 
savings through Information Lifecycle 
Management, according to Robert 
Terdeman, the company’s vice president 
and chief information architect. “One of 
the key results is that our business was able 
to cut support staffing by 30 percent yet 
increase its throughput by 20 percent,” 
says Terdeman. “It had a significant bot 
tom line impact and a net delta of some- 
where around 10 percent in our prof- 
itability, directly attributable to this 


planned technology.” 


TECHNOLOGY OPERATIONAL 
EFFICIENCY: BUSINESS DRIVERS 
Much has changed over the past several 
years for companies that rely on online 
information for strategic value. Consider: 
Budget Constraints. While CIO maga- 
zine’s latest quarterly Tech Poll forecasts a 
modest increase in IT budgets for 2004, 
caution is still the watchword. Nearly one- 
third of survey respondents say that ongo- 
ing financial constraints affect IT spending, 


while nearly 60 percent say that spending 


Advertising Supplement 


OPERATIONAL EFFICIENCY: 
UR See sat 


¢ Budget Constraints 

* Explosive Information Growth 

* Manual Processes 

© Fragmented Management Strategies 
¢ Regulatory Compliance Issues 


on computer hardware will remain flat or 
decrease. 

Explosive Information Growth. 
Companies are squirreling away unprece- 
dented quantities of data in many forms— 
the structured information that lies in data- 
bases as well as the unstructured, file-based 
information that lies in Word and Excel 
documents across a network. 

“Information is growing at a ridiculous 
rate,” says Steve Kenniston, a technology 
analyst at Enterprise Storage Group, a 
research company based in Milford, Mass. 
“Where there used to be one storage 
administrator for one terabyte of data, now 
they need one administrator to manage six 
terabytes, and soon it'll be one for ev ery 14 
terabytes. For that to happen, companies 
need to make information management 
more efficient.” 

Manual Processes. “Categorizing, 
moving and disposition of data is still a 
very manual process at most companies,” 
says Hollis. “Tools are few and frag 
mented, and a far cry from the automat- 
ed determination of policy.” Worse, man- 
ual information management consumes 
staff time—and as Hollis points out, 
“Labor is the most expensive component 
of IT today. “ 

Fragmented Management Strategies. 
Gaining a bird’s-eye view of all that infor- 
mation is no small task. Without a compre- 
hensive strategy, it’s difficult for companies 
to manage the data that’s spread across an 
entire enterprise. 

Regulatory Compliance Issues. New 
regulations and corporate governance 
mandates for the storage and management 


of information mean that companies must 





be able to retrieve data quickly and on 
demand. Faced with the difficult and time- 
consuming task of accessing data that may 
well be spread across a variety of 
sources—or that may have been deleted— 
it’s small wonder that companies can be 
frightened into taking a “save it all” 
approach. 

These issues are prompting ClOs to rec- 
ognize that the real opportunity to drive 
big costs out of IT is to look across the 
entire lifecycle of the information and the 
infrastructures that support it. In short, 
Information Lifecycle Management. 

As detailed in earlier parts of this 
Information Lifecycle 


series, Manage- 


ment is not a product but rather a 


method of harnessing informational 
chaos. “[It] is a strategy, and one that 
encompasses people, processes and tech- 
Kenniston. Done 


right, 


nology,” says 


ILM is proactive and dynamic, and 


INFORMATION LIFECYCLE 
MANAGEMENT ENABLES 
OPERATIONAL EFFICIENCY 


¢ Improve Classification 

* Leverage Existing Assets 

¢ Enable Policy Automation 

* Tier Storage 

* Decrease Compliance Costs 
* Stretch IT Resources 


helps companies plan IT growth to meet 


their anticipated business needs. 
“lInformation Lifecycle Management| is 
the ability to provide companies with 
access to information—the right infor- 
mation—and the most up-to-date and 
logical version across the enterprise,” 
says Tanuja Randery, vice president for 
global strategic initiatives at EMC. “If 
companies want to access and use infor- 
mation to their business advantage, ILM 
enables this by providing a unified 
approach to viewing and access while 
ensuring that the cost and performance 


of the infrastructure is optimized.” 
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LINKING INFORMATION LIFECYCLE 
MANAGEMENT AND OPERATIONAL 
EFFICIENCY 
Implementing Information Lifecycle 
Management can help companies manage 
information both more wisely and _ less 
expensively. By building an information 
management strategy based on this disci 
pline, companies can build cost savings into 
their infrastructure in a holistic fashion. 
Information Lifecycle Management Helps: 
¢ Improve Classification. Many compa 
nies don’t even know what they have for 
equipment. Information Lifecycle 
Management, which starts with a thor- 
ough inventory of physical and informa 
tional assets, ensures that companies 
know exactly what they have, which 
helps them make better-informed spend 
ing decisions. By conducting a data clas- 
sification and prioritization study, com 
panies can ensure that data is placed on 
the level of storage most appropriate to 
Many 


outside 


its business value. times, that 


means calling in experts. 


“Information Lifecycle Management 
consultants are part of the storage com 
panies’ bench teams,” says Pete Gerr, an 
analyst at Enterprise Storage Group. 
“They have the services and tools that 
will help an organization classify and 
value their data, taking a step toward 
having a fully realized strategy.” 
Leverage Existing Assets. Once compa 
nies know exactly what’s there, they can 
better prioritize information assets in 
accordance with information manage- 
ment policies. “If you know up front 
what you have and how much data is 
being created, you'll do better capacity 
planning,” says Kenniston. 

Enable Policy Automation. The ability 
to simplify and automate technical 


infrastructure through Inform 


ation Lifecycle Management means 
that companies can lower business 
costs and hire fewer people. “You get 
efficiencies by automating the things that 
people have to do today,” Hollis explains. 


By creating and then automating policies 





“Information 
is growing at 
a ridiculous 
rate. Where 
there used to 
be one 
storage 
administrator 
for one 
terabyte of 
data, now 
they need 
one 
administrator 
to manage 
six terabytes, 
and soon it’ll 
be one for 
every 14 
terabytes. 
For that to 
happen, 
companies 
need to 
make 
information 
management 
more 
efficient.” 





EMC INFORMATION LIFECYCLE MANAGEMENT STRATEGIES: 


IMPACT OF ILM AND TCO SAVINGS ACROSS STAGES 


Three-Year TCO Estimate for Typical Large Enterprise” (Indexed to 100) 


ILM Step _ Baseline 
Incremental TCO Reduction 


Drivers of Reduction 
with step implementation 


“Enterprise has 750 TB of 
baseline total storage; TCO 
calculation includes busi- 
ness costs (i.e., data loss, 
compliance, downtime, and 


10-17% 23-26% 

¢ Automated 
management 
and control 


¢Networked =» Application-specific 
storage ser level align- 

* Storage ment (based on 
automation business policies)  * Service levels 

* Storage *|mproved continuity aligned across 
consolidation and compliance enterprise data 


data search time) 


If you’ve got any burning 
questions about 
information Lifecycle 
Management—and how 
you can begin 
implementing such a 
strategy—send them to 
ilm_questions@emc.com. 
We'll answer the most 
frequently asked 
questions later in 
this series. 





to drive information management, com- 
panies can streamline operations and cut 
costs. “The principal savings is around 
the dynamic movement of data,” says 
EMC’s Lewis. “The value of data changes 
over time, and ILM helps flexibly move 
data to the appropriate level of storage as 
its business value changes.” 

Tier Storage. Classifying data enables IS 
executives to create tiered storage that 
matches the business value of the data 
with the corresponding price/perform 
ance layer of storage. For example, mis- 
sion-critical applications might reside on 
high-performance disks, while important 
but less critical data land on less costly 
ATA disks. “Having high-end, mid-tier 
and archive storage makes a lot of sense 
financially and from a_ recoverability 
standpoint,” says Kenniston. “By migrat- 
ing the lower class of information to a 
second tier of storage, companies save 
money but also keep it available and pro- 
tect it more easily.” As the range of 
options in tiered storage increases, SO do 
the effective business continuity options 
for the corporate world. 

Decrease Compliance Costs. Information 
Lifecycle Management handles data 
according to its business value at a very 
granular level, so CIOs know what data 


should be kept and what can be deleted, 
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thus saving money. It also makes compli- 
ance much simpler, so companies are less 
likely to incur compliance-related expens 
es such as legal fees or staffing costs. 

Stretch IT Resources. Automating infor- 
mation management in accordance with 
data policies means that CIOs will be able 
to redeploy existing staffers to other proj- 
ects, making their resources go further for 
the same money. “If companies can auto- 
mate the process and take the human 
aspect out of it, it saves them money,” 
CIOs are 


vinced that storage can be automatically 


says Kenniston. “Once con- 
moved to the right asset when they want 
to move it, automation is the next step.” 

In an era of increasing concern over the 
cost of technology, ClOs see the wisdom of 
embracing budget reduction strategies that 
add value as well as cut costs. One impor- 
tant step is to implement a strategy that 
works across the entire company to man- 
age information holistically. 

“By implementing Information Lifecycle 
Management, we believe that CIOs can 
expect to see a net of up to 50 percent actu- 
al cost savings in overall storage costs,” 
says EMC’s Lewis. Companies can make 
sure that they drive all possible extra costs 
out of managing and storing information— 
and at the same time, truly give business 
leaders what they need to thrive. 

“If you recognize that information is a 
core company asset similar to physical 
plant and human resources, then you 
really understand the value of an inte- 
grated storage solution,” says Terdeman. 
“Because what you’re really storing are 
critical company assets in a managed and 


efficient way.” 


NEXT: [17 the next part of this series, 
we'll look at Information Lifecycle 
Management for small to medium-sized 
enterprises (SMEs). 


E MC FOR MORE INFORMATION 
where information lives Visit www.emc.com/ilm 

for an in-depth look at Information Lifecycle 

Management products, services and strategies. 
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BY RUSSELL KAY 
O HELP the reader 
sort through the bar- 
rage of terms thrown 
around in the privacy 
debate, here’s a glos- 
sary that we’ve divided into 
two sections: commonly un- 
derstood notions, and related 
technological terms. 


Notions of Privacy 
Within the context of the In- 
ternet, the right to privacy is 
still being defined. Generally, 
it involves a person’s right 

to control what information 
about himself is revealed and 
to whom, as well as what oth- 
ers may do with that informa- 
tion. It’s not the same thing as 
secrecy, but the distinction is 
sometimes murky. Privacy isn’t 
an absolute right, since it’s of- 
ten trumped by laws and over- 
riding social needs. For exam- 
ple, law enforcement officials 
may obtain warrants that allow 
them to intercept communica- 
tions or search physical areas, 
activities that otherwise would 
be forbidden 


ANONYMITY There are times 
when we're willing to supply 
personal information, provid- 
ed it’s not connected directly 
to us. When we respond to a 
survey, for example, we may 
feel comfortable about reveal- 
ing personal information, such 
as income and lifestyle choic- 
es, because we believe that 
our answers won't be linked 
in any way to our names or 
other identifying information. 
And there are other times 
when anonymity can be desir- 
able — for example, when re- 
porting a crime. 

Online, we can use an Inter- 
net site called a remailer that 
reposts a message from the 
site’s own address, thus con- 
cealing the originator of the 
message. However, remailers 
have a tarnished image, since 
many spam distributors also 
use remailers. (See also anon- 


KNOWLEDGE CENTER PRIVACY 


rivacy Glossary 


someone — such as when fill- 
ing out a loan or employment 
application — we expect the 
other party to take security 
measures to protect that infor- 
mation and not to share it 
with others. 


PRIVACY IN THE LAW The Priva- 
cy Act of 1974 asserts that an 
agency of the U.S. government 
must not conceal the exis- 
tence of any personal 

data record-keeping 
system, and each 

agency that maintains 

such a system must 
describe publicly both 

the kinds of informa- 

tion in it and the manner in 
which it will be used. The law 
defines eight principles on 
which to base and enforce pri- 
vacy policy: openness, individ- 
ual access, individual partici- 
pation, collection limitation, 
use limitation, disclosure limi- 
tation, information manage- 
ment and accountability. 


PSEUDONYMITY This concept 
originated in the field of cryp- 
tography. Pseudonymity is the 
ability to prove a consistent 
identity without revealing 

s actual name, instead us- 
ing an alias or pseudonym. 
Pseudonymity combines many 


one’s 


QUICK, 
STUDY" 


of the advantages of both 

a known identity and anony- 
mity. In anonymity, one’s iden- 
tity isn’t known, but pseudo- 
nymity creates a separate, per- 
sistent “virtual” identity that 
can’t be linked to a specific 
person, group or organization. 
Pseudonymous rem 
called “nym servers,” take 
messages addressed to the 
pseudonym and resend them 
to the pseudonym’s 
real e-mail address, 
and they can also for- 
ward messages to oth- 
ers as though they 
came from the pseudo- 
nym’s address on the 
server. And unlike with anony- 
mous e-mail, users can reply to 
a pseudonymous sender, and 
pseudonyms can establish rep- 
utations in the digital world. 


ailers, 


Privacy-related Terms 
ANONYMIZER Sometimes called 
a Web anonymizer, this privacy 
service lets a user visit Web 
sites while preventing those 
sites from gathering informa- 
tion about the user (including 
IP address, browser and oper- 
ating system identification, and 
cookie-stored data) or which 
sites he has visited. Anonymiz- 
ers usually work by using a 
proxy server to process HTTP 


WEB BEACONS 


Also called Web bugs, pixel tags or clear GIFs, these file 
objects (typically a single transparent pixel invisible to the 
user) are used along with cookies to help track the behav- 
ior of Web site visitors. Users can set their browsers to 
accept or decline a cookie, but a Web bug aiways arrives; 
it’s just another graphic on the page. Turning off cookies 


o~ 


will prevent tracking your specific activity, but 


the Web beacon can still record an 
_ anonymous visit through your IP 
“address. Web beacons are typi- 
Cally used by a third party to 


requests. When the user clicks 
on a hyperlink or types a URL, 
the anonymizing server inter- 
venes and gets the information 
for the user. The Web site 
whose page is being requested 
gets only information about 
the anonymizer server, not the 
user’s computer. An anonymiz- 
er makes a user feel that his 
privacy is better protected on 
the Internet, but it also pre- 
vents personalization, so sites 
can’t tailor their content to suit 
the user, and he may have to 
re-enter personal identification 
repeatedly (such as when mak- 
ing purchases). 


OPT-IN/OPT-OUT An important 
distinction in the privacy de- 
bate concerns the terms under 
which e-mail marketers (iegiti- 
mate ones, not spammers that 
ignore ethical and legal con- 
cerns) can contact users. Opt- 
in is the consumer-friendly po- 
sition, where companies can 
send e-mail only to people 
who have directly given their 
consent for such communica- 
tions, typically by signing up 
at a Web site. Opt-out is the 
marketer-preferred alternative 
under which marketers can 
e-mail to anyone who hasn't 
specifically told them not to. 
Unfortunately, spammers have 
used opt-out replies as a way 
of verifying valid e-mail ad- 
dresses. 

The Internet Direct Market- 
ing Bureau has endorsed opt- 
in e-mail as the best practice 
for its marketer members. 


PRIVACY POLICY Most Web sites 
have a page describing in de- 
tail the site’s privacy practices 
and what the site’s owners will 
do with any information they 
collect. 
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that will let users define and 
share personal information 
with Web sites that they agree 
to share it with. Using software 
that adheres to the P3P recom- 
mendations, users can create a 
personal profile and make it 
(or parts of it) accessible to a 
Web site as the user directs 


RFID Now on the verge of be- 
coming a widespread supply 
chain tool, radio frequency 
identification tags are getting 
smaller and cheaper, and pri- 
vacy concerns are being 
raised. It may not be long be- 
fore such tags are built into in- 
dividual items (such as cloth- 
ing), not just shipping pallets, 
ullowing an unprecedented 
amount of automated moni- 
toring of people’s habits, be- 
haviors and locations. 


SPYWARE Any technology that 
aids in gathering information 
about persons or organiza- 
tions without their knowledge. 
On the Internet, spyware is 
programming that’s secretly 
installed in a computer to 
gather information about the 
user and relay it to advertisers 
or other interested parties. 
Spyware can infiltrate a com- 
puter as a virus or as a sur- 
prise result of installing a new 
program. Data-collecting pro- 
grams installed with the user’s 
knowledge aren’t spyware as 
long as the user fully under- 
stands what data is being col- 
lected and with whom it will 
be shared. If your computer 
has spyware in it, be aware 
that you have a “live” 
sending information about 
your surfing habits to a re- 


mote location. @45114 


server 


Kay is a Computerworld 
contributing writer in Wor- 
cester, Mass. Contact him at 
russkay@charter.net. 


PRIVACY RESOURCES 


of more sources of in 
and links oa online resou! 


P3P Short for “Platform for Pri- 
vacy Preferences Project,” this 

| is a standard XML format 
adopted by the World Wide 

| Web Consortium for Web sites 
to use to encode their privacy 
policies [see QuickLink 33484]. 
P3P recommends practices 


ymizer, below.) QuickLink 45111 
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Are there technologies or issues you'd 
to learn about in QuickStudy? Ser j 
ideas to quickstudy@computerworid.c 


centralize monitoring from a 
number of different sites. Web 
bugs can be put to positive 
use, such as to track copyright 
violations on the Web. 


CONFIDENTIALITY Despite the 
absence of legal compulsions, 
most of us expect to be able to 
hold at least some personal in- 
formation in confidence, and 
if we give that information to 


To find a complete archive of ou 
QuickStudies, go online to 
@ computerworid.com/quickstudies 
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Aneclectic collection of research 
and resources. By Mitch Betts 


Camera phones: 
Deere CM ETN 
threat? 


of Justice got low marks in the survey 


| of 6,000 Americans. 
| @ “Current IP telephony products and 


implementations demonstrate an 
alarming lack of protective security 
measures, leaving the enterprise open 
to privacy violation, fraud and mali- 


| cious attacks,” warns Meta Group Inc. 


@ Ina survey of 948 people who were 
recently hospitalized, 63% of the re- 
spondents said they support the idea 
of having a complete, computerized 
medical record that could be accessed 


| anywhere in the hospital. But 58% said 

| they’re concerned about the privacy of | 
| their records. The survey was commis- | 
| $75,000 and $400,000, respectively. 


sioned by Siemens Medical Solutions 
in Malvern, Pa. 


www.computerworld.com 


children through its online registration 
process, the FTC said. 

San Luis Obispo, Calif.-based Bonzi 
Software, which distributes a free soft- 
ware download called BonziBuddy, 
was the first company charged for pri- 
vacy violations over a download, the 
FTC said. — Scarlet Pruitt, IDG News 

| Service @ 45098 


tion of their technicians during regular | 


working hours, but in the evening, the 


| technicians may prefer to disable loca- 


tion-sharing with their bosses. 


— John Blau, IDG News Service | 


FTC Nets Penalties 
For COPPA Charges 


| The U.S. Federal Trade Commission 


Camera Phones 

Today’s camera phones could be used 

for corporate espionage or privacy vio- 

lations. Here are Gartner Inc.’s recom- 

mendations for a corporate policy: 
Establish a clear policy but not an 
outright ban. 

Create clearly marked secure zones, 

where all photography is forbidden. 


Ban photography of items that are 
confidential to the company. 
Prohibit taking pictures of other 
people without their permission. 
Insist that no photographs be taken 
in places where personal privacy is 
expected. 


Research Roundup 

@ Among federal government agen- 
cies, the U.S. Postal Service gets the 
highest “privacy trust score” from the 
general public, according to a study by 
Ponemon Institute LLC and the CIO 
Institute. The CIA and the Department 


Bell Labs Software 

Hides Wireless Users 

People who don’t want their wireless 
carriers to keep track of their where- 
abouts and send unsolicited messages 
can gain greater control over their pri- 
vacy with new software from Bell Labs. 
The technology allows mobile phone 


users to specify what location informa- | 


tion they wish to share, when, with 
whom and under what criteria, accord- 
ing to researchers at Bell Labs, a divi- 
sion of Lucent Technologies Inc. 

Many European and U.S. carriers al- 
ready offer a range of location-based 
services, enabling them to track cus- 
tomers and send them relevant local 
information about, say, restaurants, 


movie theaters and retail stores. While | 


some users appreciate such services, 
others prefer not to expose themselves 
to constant surveillance. 


The Bell Labs system is analogous to | 


querying a database. The request is 


| checked against the user’s preferences 


and filtered through a rules engine, 
known internally at Bell Labs as “Hou- 


dini,” before action is taken. This entire | 


process takes only a few milliseconds. 
The technology could appeal to 
users in the corporate sector, re- 
searchers say. Equipment vendors, for 
instance, may want to know the loca- 


| 
| 
| 
| 


recently settled with two Web site op- 
erators charged with violating the 
Children’s Online Privacy Protection 
Act (COPPA), netting the agency’s 
largest civil penalty yet under the law. 
Bonzi Software Inc. and UMG 
Recordings Inc. were accused of col- 
lecting personal information from 
children online without their parents’ 
consent and settled for penalties of 


Santa Monica, Calif.-based UMG 
Recordings operates music-related 
Web sites and was charged with col- 
lecting birth-date information from 


Privacy Policy Road Map 


Conferences 


Computers, Freedom and 
Privacy Conference 

April 20-23, Berkeley, Calif. 
http://cfp2004.org 


IT Compliance World 
May 17-19, Boston 
http://itcinstitute.com/conference 


National Global HR 
Privacy Conference 
May 26-27, Washington 
www.pandab.org 


Privacy & American Business’ 
Annual National Conference 
June 22-24, Washington 
www.pandab.org 


| MORE RESOURCES 


| Get privacy news, columns and resources 
| at our online Privacy Center 

| QuickLink s1200 

| www.computerworld.com 





Here's a guide to crafting a privacy policy as the first step in enterprise privacy management. 
Remember, a privacy policy is no good if customers don’t know about it, employees can't 


implement it and the company doesn't enforce it. 


BOR Rr Vee | 
privacy policy? 


Communicate 
Do you 
your customers? 


} 


Do you solicit and 
record their consent 


update thei 
preferences 


Enable 


Enforce 


Can you 
monitor/audit 
compliance? 





still Need Proof of 
Storage Interoperability? 


See Multi-vendor Interoperability at Work at the 
World’s Largest Storage Solutions Demonstration! 


@ SOLUTIONS 
DEMO NETWORKING 


Uniting the World of Storage 
April 5-8, 2004 ¢ JW Marriott Desert Ridge Resort * Phoenix, Arizona 


Produced by 


COMPUTERWORLD =SNIA == 


Storage Networking World’s multi-vendor Interoperability & Solutions Demo, taking place at the twice-yearly Storage 
Networking World conference, April 5-8, 2004 in Phoenix, gives you a complete view of interoperability in a 
collaborative and vendor-neutral setting. Whatever your needs - whether it’s managing more storage with fewer 
resources, looking for infrastructure needs to support disaster recovery strategies, or wondering if you are ready for 
iSCSI! and SMI-S - this is the world’s best place to see feature sets. supported solutions and interoperability. 


To register to attend Storage Networking World and see the Interoperability & Solutions Demo, 


vise nw ainarsenee® 2 





— ol ET 
adaptec lQ —— iB 
| @CreekPath DECRU EMC = emutex HITACH 


NORT 
© Nirvana Steen KS 


. LSE _ IC iy 
tentang: = “ff LUMINEX 2x maxxan @MeEDATA \othog 


Quantum s7orseuirry @ Sun ™™MS MiOtech 


.. 


QLOGIC 





ww 


RF) 
ae 





ee ee 


SNAPSHOTS 


Cost of Privacy 
Setting up a privacy program office 
is the costliest part of privacy efforts 
at major corporations. Here are 
the most expensive parts 
of that cost center: 


Salaries of privacy and 

data protection staff 

Travel expenses for meetings 
Outside consultants 
Specialized education 

and training 


Making the Grade 


A consumer group recently 
issued a report card on the financial 
privacy practices of 55 California 
financial services companies. 
The following got the top grades: 


Pacific Life Insurance Co 
Star One Credit Union 


E-Loan Inc 


U.S. Bank 

First Republic Bank 

State Farm Insurance Cos. 
21st Century Insurance Group 
Fireman's Fund Insurance Co 


Most Trusted 


A ranking of the industries that 
consumers trust most to protect 
personal information: 
Hospitals, clinics 

Pharmacies 


KNOWLEDGE CENTER PRIVACY 


www.computerworld.com 


JAY CLINE 


The RFID Privacy 
Scare Is Overblown 


HE PRIVACY SCARE surrounding radio frequency identification tags is great- 

ly overblown. No company or government agency will be secretly scanning 

your house to find out what products you’ve purchased, because there’s no 

feasible way to do so. But if RFID chip makers don’t soon allay these fears, the 

escalating public emotion about this issue may effectively ban the most valu- 
able implementations of this remarkable technology. 


Hospitals imagine a day when RFID tags 
will help prevent medical errors by trans- 
mitting the correct medicine dosages to 
nurses. Appliance makers and food produc- 
ers envision faster and more targeted re- 
calls of defective products. Clothing and 
shoe stores expect RFID tags to help identi- 
fy items of the right sizes for customers, 
enabling faster service. Clothing makers 
hope the tags will be able to tell washing 
machines how to best wash items. 


Sound too good to be true? Wal-Mart and ett 


the Pentagon don’t think so. They’re count- 
ing on RFID tagging to bring them savings 
of several billion dollars from lower inven- ws 
tory management costs. Items will no 
longer need to be individually hand- 
scanned, thus expediting product loading, 
invoicing and customer checkout. Scanners 
might be placed on shelves to speed re- 
stocking and installed at building exits to prevent 
theft. These lucrative benefits prompted both organi- 
zations to mandate that their suppliers tag cases and 
pallets with RFID chips by January 2005. 

So what’s the problem? Privacy advocates are con- 
cerned about tags on products continuing to emit 
signals in the parking lot, on the road and at home. 
They’re worried that using charge cards or loyalty 


cards during checkout could result in customer identi- | 


ties being written to the tags. In the worst scenario, 
they imagine stalkers and thieves scanning cars and 
homes for expensive goods and personal information. 
Some companies are already experiencing a cus- 
tomer backlash with their product-level tagging trials. 
Shoppers at a New York clothing store recently com- 
plained about the prospect of their clothing sizes be- 
ing beamed into the air. Wal-Mart reportedly had to 
cancel a pilot where it tagged packages of high-end 
razor blades because of negative consumer feedback. 
Stories of people being tagged have only heightened 
worldwide fears of Big Brother. In Mexico, some chil- 
dren have reportedly had RFID chips implanted under 
their skin so they can be tracked if they’re kidnapped. 
A company in Brazil has supposedly embedded chips 


rear l¢ [homer tem Olah 108) 
at Carlson Companies 
Inc., a Minneapolis- 
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spitality and 
marketing industries 

Contact him at privacy@ 
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into employees’ skin to control their access 
to buildings. A school in Buffalo, N-Y., 
requires students to wear RFID-tagged 
badges to track arrival times. Some have 
speculated on the benefits of using im- 
planted RFID chips to store patients’ med- 
ical and criminal histories. With friends 
like these, does Wal-Mart need enemies? 

The RFID hype has certainly outpaced 
reality. Manufacturers and retailers have 
yet to agree on a universal electronic prod- 
uct code. RFID scanning is also far from 
error-free. But more important, RFID sig- 
nals are so weak that they’re easily blocked 
by metals and dense liquids. It’s infeasible 
today for someone driving a vehicle down 
your street to intercept signals from RFID- 
tagged goods inside your home. 

The economics of RFID chips also limit 
how they’re used. Until the price of RFID 


| chips comes down to about a penny apiece, they'll 


mostly be used at the case and pallet level, clear of any 
personally identifiable activity. So we have several 
years to identify the privacy controls we want to see 
in RFID systems. 

Some companies are already creating these privacy 
controls. Chip makers and users are discussing how 
the principles of data privacy could be built into the 
RFID process. A top priority is notifying customers 
that certain items are tagged with these transmitters 
— which could be done by placing a common RFID 
logo on product packages. To give customers the abili- 
ty to turn off the transmitters, some companies plan to 
make them peel-offs. RSA Security Inc. is also devel- 
oping a chip that could be worn on watches or bags to 
block nearby RFIDs from transmitting certain infor- 
mation. So the RFID privacy ball is rolling. 

But the gathering storm against RFID tags may soon 
outpace these positive efforts and make product-level 
RFID tagging taboo. RFID makers and users should 
take a time-out from their technical discussions and 
start talking more with the public about what’s going 
on. Their dreams of big economic returns may well 


depend on it. @ 44795 
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APPLICATIONS: 
Business, Call Centers, Banking, 
Healthcare, Retail, 
Internet access, Schools.. 
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OMe Rar tac 
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Save Space. 


The Zero-Footprint-PC, Elite-4 is an entire 
PC built inside a normal size keyboard and 
is the only all-in-one PC that gives you 
total display flexibility. You may use any 
VGA monitor or LCD flat screen display. 


STANDARD FEATURES: 

* Intel® Pentium® 4 Processor up to 2.80GHz/533 FSB 

* 128MB DDR333 SDRAM up to 2GB 

* 40GB IDE 7200 RPM hard drive, up to any size 

* 10/100 Ethernet, 4 USB 2.0, 2 IEEE1394 Firewire, 2 Serial Ports 
* 2-Year Limited Warranty 

All these features are inside the keyboard! 


as low as 


$475* 


for ZPC4020, Intel 
Celeron® 1.70Ghz 
Processor, 128MB 
Ram, 40GB hard 
disk, 10/100 LAN 


Space Saving Technology 


co 
CYBERNET ™ 
335 


For product specs and model options visit us at: www.cybernetman.com, 
or call: TOLL FREE 888-834-4577 international 949-477-0300 
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NOTICE OF SALE OF ASSETS AND OPPORTUNITY TO BID 


PLEASE TAKE NOTICE that Philip V. Martino, chapter 7 trustee for the bankruptcy 
estate of Xentex Technologies, Inc., will (himself or through proxy) conduct a public auction 
on April 14, 2004, at 1:00 p.m. at the United States Bankruptcy Court for the Northern District 
of Illinois, Dirksen Federal Building, 219 South Dearborn Street, Courtroom 680, Room 610, 
Chicago, Illinois, of the bankruptcy estate’s intellectual property described below and an 
automobile pursuant to bidding procedures that the bankruptcy court has approved. 


“Intellectual Property” includes, but is not limited to, Xentex’s patents (including, but 
not limited to, US Patent no. 6,081,207; US Patent no. 5,949,643; US Patent application 
serial no. 09/690,799; Chinese patent application serial no. 99816492.5; Taiwan patent 
application serial no. 088109026); and the following, whether or not they be in the Trustee’s 
possession: Xentex’s trademarks or service marks and the good will appurtenant thereto; 
Xentex’s copyrights and works of authorship; Xentex’s drawings; Xentex’s laboratory books; 
all of Xentex’s originally-authored, solely owned or duly licensed software (Subject to the 
terms of applicable license agreements, if any); Xentex’s object codes, source codes and 
hardware related to any of Xentex’s actual or proposed products; Xentex’s blueprints; 
Xentex’s customer and supplier lists; Xentex’s computers, floppy disks, hard drives, cd roms 
or dvds; or any paper or electronic document related thereto and other intellectual property 
of every sort and description. 





“Automobile”: Xentex’s 2000 Jeep Grand Cherokee. 


To qualify to participate in the auction, any party bidding must deliver to the Trustee’s 
counsel at or before the auction, among other things, an advance cash earnest money 
deposit of $12,500 for the Inteliectual Property and $1,400 for the Automobile, both in the 
form a cashier’s check or certified check. A complete copy of the bidding procedures is 
available upon request by contacting the undersigned the Trustee’s counsel. The Trustee 
will seek approval of the results of the auction before the Honorable John H. Squires, United 
States Bankruptcy Judge, on April 15, 2004 at 9:30 a.m. at the United States Bankruptcy 
Court for the Northern District of Illinois, Dirksen Federal Building, 219 South Dearborn Street, 
Courtroom 680, Chicago, Illinois. 


For a complete set of bidding procedures, please contact the Trustee’s attorney, Colleen 
E. McManus, PIPER RUDNICK LLP, 203 North LaSalle Street, Suite 1800, Chicago, Illinois 
60601-1293, phone: (312) 368-7027, or email colleen. mcmanus@piperrudnick.com. 
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IT Careers in Financial Services 


ens of thousands of jobs were cut in the 

financial services sector over the past three 

years. But the cycle seems to be changing as 
new investments in technology and an uptick in job 
postings are replacing news of layoffs. 


In two recent reports, Financial Insights 
and IDC noted increases in financial 
services IT spending for everyone from Wall 
Street to community banks. IDC’s 2004 
report, U.S. IT Spending Forecast Update 
by Vertical Market, found that IT spending 
in banking and manufacturing leads all 
industries for the next four years, the 
combination of the two accounting for 
one-third of the $391 billion to be invested 
in IT. 


Peeling back that investment, 
Financial Insights looked at the specifics 
of IT in financial services in three categories 
— capital markets, corporate banking and 
retail financial services. In the capital 
markets category, Financial Insights predicts 
Wall Street firms will reduce the complexity of data 
infrastructure and invest in automated systems 
for trading and credit risk management. The 
corporate banking category within financial services 
is expected to invest in profitability management 
tools, customer e-care, integration of legacy 
systems and new models in business-to-business 


Where Fhe 


Get Better! 


www.itcareers.com 


ah 


trade services. Retail financial services are 
expected to increase IT spending by about 4.5% this 
year to better manage fraud, credit risk and 
international payment processing and delivery 
systems. 


The investment levels have to be balanced 
with other trends. While capital markets are 
expected to reduce the number of IT vendors, reports 
indicate American Express will continue to heavily 
outsource IT work (some estimates as high as 70%). 
Charles Schwab/CyberTrade cut 10,000 jobs during 
the down cycle but early this month had more than 


Best 


3680 Hacks Cross Rc 
2220, Memphis 


EOE M/F/D/V 


levelop 
user-ori based 
on Cognitive Ergonomic/HC! 
principles. Requires Masters 
degree with focus in HCl, plus 2 
yrs. experi as_ Usability 
Engineer involving comput 
software development inciud 
cognitive task analysi 

testing, heuristic evaluatic 
ferential statistical analysis. 
advanced web __ technology 
(AS400, HTML, WebServer and 
computerized graphics 
and Yield Management princi- 


design 


ples. Send resume 
erac.com and reference the 
Usability Architect job title and 
code: JMVL in the subject line 
of your email or mail to IS 
Recruiting, Attn: JMVL, Craw- 
ford Group, 600 Corporate Park 
Dr., St. Louis, MO 63105. 


to isjobs@ 


100 jobs posted. The corporation is looking for 

information technology experts to help them push 

forward their strategy of personal investment 

consulting. Jobs ranging from business analysts to 

programmers to application developers are 
posted, along with a plum job as vice 
president of Schwab Investment 
Management Technology. 


The Charles Schwab story is reiterated 
across the sector. The American Banking 
Association’s community banking division lists 
information technology officers as one of the 
top three most difficult slots to fill, alongside 
compliance and trust officers. According to 
Heather McElrath, ABA spokeswoman, 
community banks are expanding physically 
with new branches and need to continuously 
upgrade their online banking capability for 
customers who want 24 hour per day service 
Both require complex IT systems in a niche of 
financial services that has been slowly building 
capability over the past four years 


For more information about IT Careers advertising, 
please contact: Nancy Percival 

Vice President, Recruitment Advertising 
800.762.2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 


gained while pursu 
Proficiency 

Scripting, UML 
Server 40hrs/wk 

box C-4, P.O. Box 171 
PA 19105. 
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PROGRAMMER ANALYSTS 
for Springfield, IL office. De- 
sign & Develop software appli- 
cations using C++, Oracle, 
Sybase, XML, UML, Coolgen 
Interwoven, ClearCase, Clear- 
Quest, ITS, PVCS, UNIX 
Bachelors req'd in Computers. 
Engineering, Math or related 
field of study +2 yrs of related 
exp. 40 hrs/wk. Must have 
legal authority to work perma- 
nently in the U.S. Contact HR 
Manager, Global Infotech 
Solutions, Inc, 826 West 
Laurel, Suite 1B,Springfield 
IL-62704 


PROGRAMMER ANALYST: 3 
positions available. Plan, devel- 
op, test, and document comput- 
er programs for flat rolled steel 
production scheduling systems. 
sales order entry systems, avto- 
mated reporting systems and 
EAServer development. Must 
have B.S. or foreign equivalent 
in MIS, computer science, or 
electrical engineering and 9 
mos. exp. in job offered. 40- 
hrsiwk, 8A to 5P. Must have 
authorization to work in the U.S 
on a permanent basis. Qualified 
applicants send resumes to 
Steel Dynamics, I!nc., Attn: R 
Francis, 6714 Pointe Inverness 
Way, Ste. 200, Ft. Wayne, IN 
46804 


System Analyst needed, 
w/exp in: Lotus Notes 
Domino Web application 
using Lotus Notes, Lotus 
Notes R5, Java Script, 
Visual Basic, Lotus Script 
HTML, DHTML, XML, XSLT 
and XSL FO Send 
resumes to: Netsource 
Communications Inc 
12700 Dupont Circle, 
Tampa, FL 33626. 


Programmer Analysts for Peoria 
IL office. Design & Develop soft- 
ware applications using Oracle. 
Erwin, Interwoven, Coolgen 
XML, UML, C++, ClearCase 
PVCS, UNIX; Bachelors reqd in 
Computers, Engineering, Math 
or any related field of study + 2 
yrs of related exp. 40 hrs/wk. 
Must have proof of legal author- 
ity to work permanently in the 
U.S. Send resume to HR 
Manager, Redsalsa_ Techn- 
ologies, Inc. 14001,N. Dallas 
Parkway, # 550 Dallas, TX 
75240 


IT Careers 
Wants You! 


Take the hassle out of 


job searching and 


check us out at 


www. itcareers.com. 


Today, more than ever, 


the right skills fuel the 


new economy and IT 


Careers wan 


ts you to be 


there. Check us out at: 


areers.com 
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Miami, FL - Adjoined Consulting 
seeks Principal and Sr. Principal 
Consultants as well as Man- 
agers with full project cycle 
experience using combinations 
of Oracle, Business Objects 
Cognos, SAP and Peoplesoft to 
provide ERP solutions. Re 


quires 2 years of experience for 


Principal Consultant and §& 


years of experience for Sr 
Principal Consultant and 
Manager positions. For consid- 
eration, e-mail your resume tc 


recruiting@adjoined.c: 


PROGRAMMER ANALYST 


computer so 
applications using 
4GL, Progress RDBMS, UNIX 
SQL, Java & JSP in WIN & UNIX 


environments achelor's de 


HR Dept., integratec 
& Services Grou; 


Little Falls, NJ 07424 


ics Artist to 
3 n r visuals w 
print & elec Use Adobe 
ust Photos 
rk X-Press & MS 
graphics, logo & we 
design se HTML, PHP & 
Ss web page desig 
maintain n 
ntranet web sites. Copy writinc 
for wet sletter art 
cle c pc mes: 
sages & proj. summa De 
velop animation & other multime 
3 Adobe Premiere 
media Director & Flast 
Bachelor's in Graphics Arts + 2 
yrs. exp. in job duties. Comp 
Salary at prev. wages. Apply 
OSI, 4005 Windward Piaz 
550, Alpharetta, GA 
proof of perm. Work authz 


S to analyze, de- 
sign, implement appis using 
OOAD, C, C++, VC++, VB 
Oracle, HTML, SQL Server, GU! 
tools, ASP, VBScript, Crysta' 
Reports under Windows, UNIX 
& Sun Solaris (or) C, C++ 
VC++, Socket Programming 
Shell Scripting, TCP/IP, Ration- 
al Rose, Clear Case, etc. under 
Windows, Unix and VxWorks. 
perform testing, debugging 
documentation of appis; main- 
tain and support existing appls. 
Require: B.S. or foreign equiv. 
in CS/Engg. (any branch) & 2 
yrs exp. in IT. Travel involved 
F/T. Comp. salary Resumes to 
HR, Ciphertrust, Inc., 4800 
North Point Parkway, Ste 400. 
Alpharetta, GA 30022 


PROGRAMMER ANALYST 
SOFTWARE ENGINEER- Cyber 
Technology Group, Portland 
Maine needs experienced s/w 
professionals with experience in 
object oriented and distributed 
systems, developing software 
applications using Java /J2EE 
(Weblogic), C++, XML/XSLT. 
TCP/IP, Oracle, common design 
patterns, UML, RUP and Model 
Driven Architecture. Knowledge 
of collaborative systems and 
mobile code is a plus. Please 
email your resume to 
hr@cybertechgroup.com or mail 
to CTG, 480 Congress Street 
Ground Floor, Portland, ME 
04101 
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Information Sessions: Wednesday, March 24 Wednesday, April 28 


Please call the number below 6-8 p.m. 6-8 p.m. 

to RSVP, American Management Association American Management Association 
1601 Broadway, 8th Floor 1607 Broadway, 8th Fioor 
(at 48th Street) (at 48th Street) 


Master of Science in Systems Administration 


Advance in today’s rapidly growing world of technology with a Master's in Systems Administration from NYU. This 
powerful new program provides students with the skills they need to implement, manage, and troubleshoot today’s most 
complex network and systems environments. The degree focuses on translating business objectives into specific system 


requirements, ensuring a high level of security, and understanding the needs of application programmers and users 


Sophisticated technological systems are at the core of the way all businesses are run today. Our challenging curriculum 
and faculty of industry leaders make certain that graduate candidates earn the skills and gain the knowledge to become 
top quality systems administrators, and form networks that will provide important professional contacts. 


NEWYORK 
1-888-998-7204, ext.532 UNIVERSITY 


\ Master's degree from NYU - a tradition of innovation and excellence. 


www.scps.nyu.edu/532 
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MBNA America Bank 


ard issuer, 


Salary: S$¢é 


Hours: Monday- Friday 8:00 
a.m. until 5:00 p.m 


efe 


3e 
DE203819 


Sr. Developer for comput- 
er co in Larchmont, NY. 
Must have 4 yrs exp in all 
aspects of s/ware devel- 
opment. Send resume to 
Timelink, 2635 Boston 
Post Rd, Larchmont, NY 


10538, attn: Dale 
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Senior Software Engineer for 
g dsgn svcs Co for wireless 
Redmond, WA 

Responsible for reqmts, dsgn & 
mpimtn of embedded applics for 
wireless devices & dvipg wire- 
, S/ware 

ys eqpmt 

position incl 

for telecomm 

s/wal mts 

2ct oriented reqmts 

UML) & dvipg 

or mobile devices. 

> object oriented s/ware in 

or Java; dvip embedded 

Cc Symbian 

(or other win- 

vrmt such as Win CE 

J2ME & BREW 


2 tech superv 
evel 

J out duties, use 
ARM « piler 
J2ME wireless 
sgger, & Agilent 
aless test set or equiv 
eqs Bach or equiv in 
field. 5 yrs 

yrs exp in 

U s/ware in 

yond to HR 
NENGO01-IT. 

1121 Willows Rd 


Redmond, WA 


nedia Web Developer. 

ults w/ design, technical 
rketing staff to plan web 
Develops graphic & 

| architecture of web 

luding database 

user interface 

design Req Bach in 
Advertising or Related Field & 
of exp. in job or 1 yr. of 

5 a Graphic Designer. 

Send Resume 

Tempart, Inc 

h St Fort 


33316 (job- 


or Programmers with MS in 

and min 2 yrs exp wanted in 
Must have working 
knowledge of ASP, .NET, J2EE 
SQL, XML, BizTalk Server 2002 
WebMethods, Oracle Certified 
DBA, MCSD, MCDBA, wireless 
applications. Resume to: E- 
Ceptionist. Inc., 2000 Bagby 


Ste. 5430, Houston, TX 77002 


Software Developer to analyze 
design, develop appls including 
IP appls using ASP, ASP.NET, 
VB.NET, HTML, Java, Java- 
Script, VC++ , VB, COM, Oracle 
9i, PL/SQL, XML, XPATH, XML 
DOM, WEBDay, IIS 5.0, SOAP 
etc; develop data aware security 
model using Oracle XML DB 
running Java External Routines 
on Oracle 9i in conformance 
with XACML 1.0 standards; write 
components for establishing 
asynchronous data transfer us- 
ing MSMQ; co-ordinate with off- 
shore development team and 
provide end user training. Re- 
quire a B.S. or foreign equiv in 
CS/Engg (any branch) with 3 yrs 
exp in IT. High salary. F/T. Travel 
nvolved. Resume to HR, Triton 
Information Technologies, Inc 
501 Silverside Road, Suite 139. 
Wilmington, DE 19809 


PROGRAMMER ANALYS 
SOFTWARE ENGINEERS 
Needed: Several Sr. and Mid 
Level positions available for 
qualified candidates possessing 
MS/BS & reievant work experi- 
ence. Work with COBOL, JCL 
VSAM, DB2, CICS, ORACLE 
JAVA, SERVLETS, XML, EJB 
C++, VC++, SYSTEM ADMIN 
DBA's, SAP, Seibel, Peoplesoft 
and Technical 
Please mail resurr 
Dept. LanceSoftinc 
Higgins Road, Suite 
Hoffman Estates, IL 


Recruiters 
o Attn: HR 


Systems Analyst. Responsible 
for Wholesale Distribution 
Systems analysis, design, and 
development; website design 
and programming; computer 
system support needs; and 
research and dissemination of 
information on technology 
issues. Must have two years 
college in Comp. Sci., MIS or 
Business Tech., two years 
exp., and knowledge of PRO- 
GRESS and UNIX. Send 
resume to MT Sports, LLC 
Attn: Norm Pollock, 650 
Carbon St., Billings, MT 
591 


Programmers & Software 
Engineers: Analyze, design 
develop apps in: (A) 
Vertex, Goldmine, Lawson 
Financials Oracle/SQL 
Server 2000; (B): Oracie 
and related tech., SAS & 
related SAS tools, Proc 
Format, Metadata, Cognos, 
Dataminer Oracle/SAS 
Cert. preferred. Attn: Chet 
Patel, 120 Bluegrass 
Parkway, Alpharetta, GA 
30005 


IT Education & Trainin 


Contact the companies listed below 
to help you with your training needs! 


Computerworld + InfoWorld 


Software Engineer: For co. spe- 
cializing in mktg & mnfg of com 
puter s/w, write/modify applica- 
tions, programs & modules from 
design specs; test, maintain 
debug, update & assist in estab- 
lishing quality assurance plans 
for programs & applications. 
keep current w/ evolving sys 
analysis, programming & data- 
base tech. Develop & test com 
plex SQL stored proced 
view & functions: velop data 
marts using by MS Analysis 
Srvs; provide on-call customer 
ort. Req's: Bach r 
completion of degree rec 
menis, in C Sci, Info Sys or 
a related field. 1 yrs exp in job 
offered or 1 yr of programming 
exp. Exp must include support 
ing PC's, mainframe or Web- 
based environments. Pre 
cy in Oracle, Java & SQL 
40hrs/wk. Send res. tc 
P.O. Box 1924, Phila, PA 19105. 


Material Management Analyst 
wanted by Danco (subsidiary of 
NCH Corp) to handle manage- 
nent of import & vendor rela- 
obsolete 
sourcing activities 

have minimum bachelor in man- 
agement with experien 
Please apply at 

@nch.com. EOE. No calls. 
Infomerica is looking for sys 
tem/programmer analysts, soft 
ware/project engineers & com- 
puter consultants working at dif- 
ferent sites (travel required) 
Candid. must have BS with 
1-year exp. in IT fields. Skills of 
Oracle, Informix, Java preferred 
Send resumes to. 
info@infomericainc.com EOE 


Software Performance Engin- 
eers, Boston. Develop, plan & 
execute performa tests for 
bus/financial s/w, incl. integra 
tion, regression, load, & stress 
on multi configs & ; 
assure standards & 

training, cust. interact 

site trouble-shooting 
mgmnt s/w, web 
AIX, Load Runner 


ere/DB2 on 

LK Perfor- 

n config & 

ed apps. Reqs 

or comp & 6 yrs exp 

as sys eng or analyst, including 

full lifecycle develop. UNIX 

n shell, sed, awk & 4 yr. exp 

in PERL, 2 yrs. XML. Perm 

workers only. Resumes to: N 

Green, S1, Inc. 3500 Lenox Rd 
Ste. 200 Atianta GA 30326 


Advansoft (Soft O Soft) is look- 
ing for program or system ana- 
lysts, IT engineers. Candidate 
must have BS or equivalent 
Exp. in IT area such as Oracle. 
Java, VB, WebSphere/Weblogic 
etc is plus. Travel maybe 
required for some position 
Please email resumes to 
info@advansoft.com. EOE 


System Analyst or Software 
Engineers wanted by Mobics, a 
small but stable company. Job 
duties include work on 
Java/Script, JSP, Serviets, Unix 
Oracle. Travel maybe required 
Min qualification is BS+exp. 
Competitive wage with full bene- 
fits. Please apply at 
info@mobics.com. EOE 
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A Call 
To Action! 


Take the hassle out of 
searching for the right 


candidate and contact us 


at (800) 762-2977. 


We can place your 


‘message in front of 2/3 of 


all US IT professionals. 


www.itcareers.com 





To place your ad please call 800-762-2977 


iPexpert, Inc. 
(866) 225-8064 
www.ipexpert.com 


CCIE (R&S, SEC, and C&S), CCSP, 
CCNP, CCNA, IP Telephony 
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CBT Nuggets 

(888) 507-6283 & (541) 284-5522 
www.cbtnuggets.com 

Affordable training videos on CD 
MCSE, MCDBA, MCSD, CCNA, 
Citrix, Linux, A+, Net + 
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a new 
career? 


Check out our jobs 
in the combined 
CareerJournal.com 


database. 


www. itcareers.com 


Calif based IT co has open- 
ings at its Torrance, CA and 
Milwaukee, WI ofcs and at 
unanticipated client sites ac- 
ross the US for Prgmmr 
Analysts, Sftware Eng, Sys- 
tems Analysts, Biz Dvipmnt 
Consultants and Biz Analysts 
Send resume with salary reqs 
to RJT Compuquest, 23430 
Hawthorne Bivd #305 


Torrance, CA 90505 Attn: HR 


Get the best people fast 


obarceca bene ate 


_- 


oc@ Glo gem ole08 


IT community of qualified 


OU co) ras torre @itce aol 


our win 


ing team at: 


www.itcareers.c 


yr call: 


800)762=2977 


woac 


Assistant Business Develop 
ment Officer: Contac new 
Clients in territorial/industry area 
of responsibility, maintain rela: 
tionships with e shed 
clients, participate in Information 
Technology development project 
proposals, support 
Development Officer in ne 
ng Information Tech 
development contracts 
data on required skill 
project completior 
technical specifications 
ject teams, monitor project 
teams for time table cc ance 
Must have Bachelor's or equiva 
lent in Engineering uter 
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Continued from page 1 
SQL Server 


chitect at Tacoma, Wash.- 
based Labor Ready Inc. 
Gilbert said the temp-labor 
services firm had hoped to 
start using Yukon this year to 
take advantage of the integrat- 
ed Visual Studio tools, plus 


new features for large databas- | 


es. But Gilbert said the first 
beta release of Yukon still 
needed a lot of work. For in- 
stance, he said, several work- 
bench management tool fea- 
tures weren't activated yet. 


Customers Respond 

Larry Godec, CIO at First 
American Title Insurance Co. 
in Santa Ana, Calif., said he 
fired off a note to Microsoft as 
soon as he learned about the 
new delay. First American 
uses SQL Server 2000 to run a 
homegrown title and escrow 
transaction system for 10,000 
users in 1,200 offices. The 
database server has to be shut 
down for more than 14 hours 
every time the company rein- 
dexes the system. But Yukon is 
supposed to allow mainte- 
nance while the database is 
online, Godec said. 

“My note to Microsoft was, 
‘If it’s going to be delayed to 
2005, you need to figure out 
how you get that functionality 
into SQL 2000 for us,’” he said. 

Don Watters, data group 
manager at film processor Pho- 
toWorks Inc. in Seattle, said, 
“T’ve been touting [Yukon’s} 
abilities to so many people 
here and in other organizations 
that I'd like to actually be able 
to show them that it’s going to 
become a reality someday.” 

Watters said he fears that 
the SQL Server team’s contin- 
ued focus on Yukon means it 
won't devote much attention 
to fixing bugs in SQL Server 
2000. But he hopes Microsoft 
will take advantage of the de- 
lay to correct such things as 
security flaws before shipping 
the upgrade. 





Yukon, which Microsoft 
said will be called SQL Server 
2005, will add 64-bit support 
and enhancements in areas 
such as scalability and securi- 
ty. The software was originally 
due out last year but was de- 
layed until the middle and 
then the end of this year. 

Tom Rizzo, director of prod- 
uct management for SQL 
Server, said the upgrade was 
delayed yet again because of 


| feedback from users and part- 
| ners that have tested the soft- 


ware. “In the database world, 


| you can’t release a poor prod- 


uct,” he said. “We aren’t date- 
driven; we’re quality-driven.” 
A second Yukon beta re- 


| lease is scheduled to become 
| available in the next few 


months, along with the first 
test version of Whidbey. But 


Rizzo said the Yukon beta still 


won’t have all the promised 
functionality and will be fol- 





lowed later this year by the 


| third beta, which will be run 
| in production by a group of 
| about 15 customers. “There are | 


a lot of areas we want them to 


| test it [in] in the real world,” 


he added, citing as examples 
Yukon’s data management, us- 


| ability, security and developer 


productivity features. 

SQL Server 2000 will be 
nearly five years old by the 
time Yukon ships. Microsoft is 
taking “an insanely long time 
between major database re- 


| leases,” said Mark Shainman, 

| an analyst at Meta Group Inc. 
| “It’s getting comical.” He not- 
| ed that Oracle Corp. has come 
| out with both the 9i and 10g 

| versions of its database in the 
| same amount of time. 


Some users aren't getting 


| anxious. “In terms of the delay, 


it will not impact us in a major 


| way,” said Kirk Pothos, a soft- 


ware development manager 


Delay Raises Questions About 
Software Assurance Contracts 


Microsoft's disclosure that the re- 
lease date for Yukon has slipped 
again gave some SQL Server 
users even more to think about 
than the potential impact on their 
IT project plans. 

Many Microsoft server cus- 
tomers signed contracts for the 
Software Assurance program that 
the company introduced in October 
2001, paying an annual amount 
equal to 25% of their upfront li- 
cense fees. The contracts cover 
two or, more typically, three years, 
and customers gain the rights to 
the upgrades of the covered prod- 
ucts released during that time. 

Microsoft last September en- 
hanced Software Assurance by 
adding support and training op- 
tions, as well as home-use rights 
for Office. But the latest delay of 
Yukon will likely mean some SQL 
Server users won't get an upgrade 
before their initial contracts expire. 

“I'm certainly disappointed,” 


said Larry Godec, CIO at First 
American Title Insurance. Godec 
said he “absolutely” expected that 
there would be a SQL Server re- 
lease during his company’s three- 
year enterprise agreement with 
Microsoft, which has Software As- 
surance built in and is due to ex- 
pire next year. 

He added that he will take the 
additional delay on the database 
into account when he decides 
whether to renew the contract for 
his server software. 

“We didn’t purchase Software 
Assurance earlier, and it would be 
a difficult sell after this,” said Keith 
Gilbert, an enterprise data archi- 
tect at Labor Ready. 

Gilbert said Microsoft marketed 
Software Assurance as an “up- 
grade process” when it started the 
program. “It wasn’t marketed as 
support, which a lot of people have 
through TechNet, MSDN or what- 
ever else,” he said. 
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“The misconception out there is 
that Software Assurance is just 
about upgrades,” said Sunny 
Charlebois, a product manager for 
worldwide licensing and pricing at 
Microsoft. She said Microsoft has 
worked hard to help customers un- 
derstand the value of Software 
Assurance and commissioned 
Forrester Research Inc. to develop 
a tool to calculate the return on 
investment. 

But Alvin Park, an analyst at 
Gartner Inc., said that he’s not 
convinced users “see enough 
added value above and beyond a 
potential upgrade to want to buy 
Software Assurance.” 

Forrester analyst Julie Giera said 
many of her clients are approach- 
ing renewal dates for Software As- 
surance in the next four months. 
The timing of the delay “is certainly 
going to present Microsoft with 
some difficulty,” Giera said. “SQL 
Server customers especially 
should be trying to get concessions 
from Microsoft.” 

Users aren't forced to buy Soft- 
ware Assurance and aren't guar- 
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at Xerox Global Services Inc. 
Pothos said he’s interested 

in some of Yukon’s features, 
including database adminis- 

| tration improvements. But, he 

| added, “we always build some 

| leeway into our schedule for 

| such things.” 

| However, a database ser- 
vices manager at an interna- 
tional cosmetics manufacturer 

| and retailer said his company’s 

| developers will have to scrap 

| plans to write a sales force ap- 

| plication on top of Yukon and 

| Whidbey. The application has 

| to be ready later this year, so 

| the developers will use the 

| current versions of Visual Stu- 
dio and SQL Server, said the 

IT manager, who asked not to 
be identified. “I applaud [Mi- 

| crosoft] for not taking a step 

| backward by putting out a 

| product that’s not ready,” he 
added. “But that doesn’t mean 

| I’m happy about it.” @ 45400 


anteed an upgrade, said Tom Riz- 
20, director of product manage- 
ment for SQL Server. He added 
that Microsoft will continue to en- 
hance Software Assurance and 
consider extending support for 
older versions of SQL Server. Cur- 
rently, mainstream support is due 
to end Dec. 31, 2005, for SOL 
Server 2000 and SQL Server 7 

Park said Gartner has been 
pushing Microsoft to offer guaran- 
teed upgrades as part of Software 
Assurance, but Microsoft has 
balked, noting that no other ven- 
dors do anything similar. 

“We can't run a business and 
do that,” Charlebois said. 

Steve Sommer, CIO at law firm 
Hughes Hubbard & Reed LLP in 
New York, said he has already put 
the cost of a Software Assurance 
contract into his 2005 budget. 
Sommer said he likes the new 
support options and isn’t worried 
about upgrades because he has 
“a very strong feeling” that Mi- 
crosoft will compensate loyal 
users. 

- Carol Sliwa 
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ISPs’ Spam Fight 


ALL IT THE REVOLT of the ISPs. Last week, the four 
biggest U.S. Internet service providers — America On- 
line, EarthLink, Microsoft and Yahoo — filed six law- 
suits against high-volume spammers. The lawsuits tar- 
get several big-time spammers by name, along with 
hundreds of “John Does” — that is, spammers to be named later. 
Meanwhile, news also surfaced that broadband provider Comcast 
has been cutting off Internet service for some customers whose 
computers are being used to relay spam messages. 
What gives here? Has the whole ISP world suddenly gone sane? 


OK, let’s be fair: This surge of antispam sani- 
ty isn’t that sudden. Some big ISPs have been 
filtering out spam for years, using tools such as 
the Realtime Blackhole List of spam sources 
maintained by Mail Abuse Prevention System 
LLC. In fact, for some ISPs, spam prevention 
has become a selling point. 

And it’s not out of altruism or good citizen- 
ship. Spam costs ISPs bandwidth, which trans- 
lates into money. And the ISPs’ users hate spam, 
so less spam means happier customers. 

But last week’s round of lawsuits clearly kicks 
the ISPs’ antispam efforts up a notch. Who'd 
have thought the tortuously named CAN-SPAM 
law (for “Controlling the Assault of Non-So- 
licited Pornography and Marketing”), which 
went live in January, would be more than wish- 
ful thinking for dealing with spam? 

Even more noteworthy is Comcast’s decision 
to pull the plug on customers whose PCs have 
been turned into spam zombies. Unlike the 
spammer-suing ISPs, Comcast is shutting down 
its own customers and risking their wrath. 

But huge numbers of Comcast’s cable broad- 
band customers are naive home users with no 
firewalls or virus protection, whose PCs are 
continuously connected to the In- 
ternet, making them prime targets 
for worms that will use them to re- 
lay spam. Going after its customers 
may be the only way for Comcast to 
protect its network. 

If Comcast spots signs that a cus 
tomer’s PC is pumping out spam, 
Comcast issues a warning. If the 
customer doesn’t clean up the prob- 
lem, Comcast cuts off service. 

For corporate IT shops struggling 
against a constant flood of spam — 
much of it generated by broadband- 
connected home users — that’s 
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good news. Except that it’s bad news, too. 
Why? Because some of the users cut off by 

Comcast — and other broadband providers, if 

they follow suit — are likely to be our users. 
You know the ones. They turn off antivirus 


software, circumvent firewalls and work around 


security procedures. They’re security disasters 
looking for a place to happen. At work, we pro- 
tect them from themselves. At home, we can’t, 
and they’re bound to get into trouble. 

But when hapless executives and other em- 
ployees discover they can no longer use the In- 
ternet to work from home because their broad- 
band providers have cut them off, our help 
desks will still have to field the calls and clean 
up the mess. 

That means we'd better get ready. And we 
can start by spelling out for our users just what 
might happen. 

We can explain that broadband providers are 
getting serious — even heavy-handed — about 
dealing with customers whose PCs are infected 
with spam-generating worms. We can warn that 
their broadband service might be cut off if they 
don’t have antivirus and firewall software. 

And we can tell our users what to do if their 
broadband providers warn them 
about being spam relays. We can 
help clean up the problem so 


they’ll stay connected — but only if 


they act immediately when they 
get a warning. If they wait until 
their service is cut off, it’ll be hard- 
er to straighten out. 

Sure, walking users through all 
that is a pain. And it shouldn’t real- 
ly be necessary. 

But it’s the price our IT shops 


the benefits of this ISP antispam 
revolt. @ 45380 








From Bad to Worse 


When this 24/7 server loses a disk drive, an alarm 
starts beeping to warn sysadmins to replace the drive 
in the RAID array. New disk will be installed in 24 
hours, says pilot fish, but meanwhile the boss com- 
plains about the noise. “Can it be stopped?” he asks. 
Not without a reboot, fish says. “No way we can afford 
the downtime,” boss says. “But could you get a pair of 
wire cutters and take care of the beeping?” 


eed tt says fish. But 
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enter stuck in the 
—— TANK. CD-ROM drive? 
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: puters ~ by name - of 

: other hotel guests,” fish 

; says. “I was just glad | 

: had a firewall and was 


But It Was a PC 


i password 
_ ave, sysadmin pilot Fish 
User tells new-hire sup- : asks what the manager 
port pilot fish that he has { i changed his password 


a business card stuck in ; to. I didn’t change it, 
his PC's CD-ROM drive. : says manager - “they” 
“Don't take his word for _ did. “typed inthe org 
it until you see what it ; nal password,” fish says. 
is,” says fish’s boss. : “Amazingly, it was ac- 
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FEED THE SHARK! Send your true tales of IT life to 

sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 





Gateway’ servers are the 
; no-risk policy for the 
a California Department 
' oy Maelo 







“We standardized on Gateway because in the 
end, it all comes down to support and cost. 
With Gateway we get the best of both.” 


Jesse Castillo, Network Support Manager 
California Department of Insurance 


Gateway listened to the problems facing the California 

DY -or asa tal ol dee alee Mat] A818 -Laglo) (oy X-Cart) 
was fast becoming the most vital.communication method for 
agents, companies, and the public. However, their e-mail 
system was outdated. 


The solution? Three séts of clustered servers with Intel” Xeon 
Processors to deliver faster response by removing bottlenecks 
and balancing unpredictable processing loads, while providing 
adam 215-01 


Now they have an e-mail system that delivers increased 
productivity and reliability with only 9 servers—instead of 14. 


To find out why our Server and storage 
technology is a better business policy, 
call your Gateway representative. 
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Gateway” 975 Series Gateway” 840 Serial-ATA 
2U, High-Availability Server RAID Enclosure 


* Dual Intel® Xeon™ Processor capable 2U Rack optimized Storage Chassis 

* Up to 12GB PC2100 ECC SDRAM ; * Scales up to 2TB for under $6,000 

° Six 64-bit PCI-X Slots or 3TB for under $7,200 

+ 3-Yr. Parts/Labor Limited Warranty/ * Hot-swappable SATA 7200 RPM Hard Drives? 
3-Yr. Next Business Day On-Site * Integrated SATA RAID Controller 


* FCC Class A Compliant? * 3-Yr. Parts/Labor Limited Warranty/ 
3-Yr. Next Business Day On-Site! 


Gateway Technology 
Lifecycle Services 


Gateway can support your technology 
needs, no matter where your agency is 
in the technology lifecycle. 


Award-Winning Gateway 
Customer-Centric Support 
Gateway has teamed with IBM® Global 
Services to provide phone and next 


business day, 4-hour, and 2-hour 
on-site support.! 


~ 


$2,199.00 Rey $3,999.00 





, | Call: 877-878-3256 


Go to: www.gateway.com/corp/cmpwrd 
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Oracle Database 10g 


$149 Per User 


One CD 
17 minute install 
Easy to use 


Oracle Standard Edition One 
$149 per user or $4995 per processor 
First class database ... economy price 


ORACLE 


oracle.com/standardedition 
or call 1.800.633.0753 


Limitations and restrictions apply. Standard Edition One is available with Named User Plus licensing at $149 per user with a minimum of five users or $4995 per 
processor. Licensing of Oracle Standard Edition One is permitted only on servers that have a maximum capacity of 2 CPUs per server. 17 minute install 
is based upon testing on a system with 1x866MHz Intel CPU, 512 Mb RAM running Red Hat Linux 2.1. Actual install times will vary 
and are dependent on system configurations. For more information, visit oracle.com/standardedition 
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